organize folders and MVP wireguard mesh

gitea/gitea-values.yaml

@@ -0,0 +1,79 @@
+image:
+  tag: 1.22
+
+ingress:
+  enabled: true
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+    kubernetes.io/ingress.class: nginx
+    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+    nginx.org/client-max-body-size: "0"
+  hosts:
+    - host: gitea.reeseapps.com
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+  - hosts:
+    - gitea.reeseapps.com
+    secretName: gitea-tls-cert
+
+persistence:
+  enabled: true
+  create: false
+  storageClass: zfs-iscsi-enc0
+  claimName: data-gitea-0
+  annotations:
+    "helm.sh/resource-policy": keep
+
+global:
+  storageClass: zfs-iscsi-enc1
+
+postgresql:
+  enabled: true
+  image:
+    tag: 15
+  primary:
+    persistence:
+      enabled: true
+      storageClass: zfs-iscsi-enc1
+      annotations:
+        "helm.sh/resource-policy": keep
+
+postgresql-ha:
+  enabled: false
+
+gitea:
+  admin:
+    existingSecret: gitea-admin-secret
+  config:
+    service:
+      DISABLE_REGISTRATION: true
+
+service:
+  ssh:
+    port: 2222
+    type: LoadBalancer
+    externalTrafficPolicy: Cluster
+    annotations:
+      metallb.universe.tf/address-pool: "production"
+      metallb.universe.tf/allow-shared-ip: "production"
+
+redis-cluster:
+  enabled: true
+  image:
+    tag: 7.2
+
+deployment:
+  tolerations:
+    - key: "node.kubernetes.io/unreachable"
+      operator: "Exists"
+      effect: "NoExecute"
+      tolerationSeconds: 1
+    - key: "node.kubernetes.io/not-ready"
+      operator: "Exists"
+      effect: "NoExecute"
+      tolerationSeconds: 1
+
+strategy:
+  type: Recreate