Switch adguardhome/esphome/signal-gateway/zigbee2mqtt to PVC storage

Replaces raw hostPath (/srv/data/<app>) with a local-path PVC per app,
so these apps get proper PVC lifecycle semantics and can have a PVC
backup CronJob (matching what gitea already has) instead of being
unbacked host directories. local-path already lives on the same disk
these hostPaths did, so this isn't a storage-tier change.

adguardhome specifically: consolidates the previous split work/+conf/
hostPath mounts into a single PVC mounted at /opt/adguardhome (its own
default convention), since a real deployment can't run two hostPath
subtrees off one PVC.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01566weDFku8TaRC2CJUPVM1

adguardhome/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: adguardhome
 description: AdGuard Home DNS server Helm chart
 type: application
-version: 0.1.6
+version: 0.1.7
 appVersion: "0.107.79"
 annotations:
   version-source: github-release:AdguardTeam/AdGuardHome

adguardhome/templates/deployment.yaml

@@ -46,16 +46,9 @@ spec:
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
           volumeMounts:
-            - name: work
-              mountPath: /opt/adguardhome/work
-            - name: conf
-              mountPath: /opt/adguardhome/conf
+            - name: data
+              mountPath: /opt/adguardhome
       volumes:
-        - name: work
-          hostPath:
-            path: {{ .Values.volumes.work.hostPath }}
-            type: DirectoryOrCreate
-        - name: conf
-          hostPath:
-            path: {{ .Values.volumes.conf.hostPath }}
-            type: DirectoryOrCreate
+        - name: data
+          persistentVolumeClaim:
+            claimName: {{ .Values.persistence.existingClaim | default (printf "%s-data" .Release.Name) }}

adguardhome/templates/pvc.yaml

@@ -0,0 +1,18 @@
+{{- if and .Values.persistence.enabled (not .Values.persistence.existingClaim) }}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ .Release.Name }}-data
+  labels:
+    app.kubernetes.io/name: {{ .Chart.Name }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+spec:
+  accessModes:
+    {{- toYaml .Values.persistence.accessModes | nindent 4 }}
+  {{- with .Values.persistence.storageClass }}
+  storageClassName: {{ . }}
+  {{- end }}
+  resources:
+    requests:
+      storage: {{ .Values.persistence.size }}
+{{- end }}

adguardhome/values.yaml

@@ -13,11 +13,13 @@ resources:
     cpu: "2"
     memory: "1Gi"
 
-volumes:
-  work:
-    hostPath: ""
-  conf:
-    hostPath: ""
+persistence:
+  enabled: true
+  existingClaim: ""
+  storageClass: local-path
+  accessModes:
+    - ReadWriteOnce
+  size: 1Gi
 
 dns:
   enabled: true