image:
  tag: 1.21.4

ingress:
  enabled: true
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt
    kubernetes.io/ingress.class: nginx
    nginx.ingress.kubernetes.io/proxy-body-size: "0"
    nginx.org/client-max-body-size: "0"
  hosts:
    - host: gitea.reeseapps.com
      paths:
        - path: /
          pathType: Prefix
  tls:
  - hosts:
    - gitea.reeseapps.com
    secretName: gitea-tls-cert

persistence:
  enabled: true
  create: false
  storageClass: zfs-iscsi-enc0
  claimName: data-gitea-0
  annotations:
    "helm.sh/resource-policy": keep

global:
  storageClass: zfs-iscsi-enc1

postgresql:
  enabled: true
  image:
    tag: 15
  primary:
    persistence:
      enabled: true
      storageClass: zfs-iscsi-enc1
      annotations:
        "helm.sh/resource-policy": keep

postgresql-ha:
  enabled: false

gitea:
  admin:
    existingSecret: gitea-admin-secret
  config:
    service:
      DISABLE_REGISTRATION: true

service:
  ssh:
    port: 2222
    type: LoadBalancer
    externalTrafficPolicy: Cluster
    annotations:
      metallb.universe.tf/address-pool: "production"
      metallb.universe.tf/allow-shared-ip: "production"

redis-cluster:
  enabled: true
  image:
    tag: 7.2

deployment:
  tolerations:
    - key: "node.kubernetes.io/unreachable"
      operator: "Exists"
      effect: "NoExecute"
      tolerationSeconds: 1
    - key: "node.kubernetes.io/not-ready"
      operator: "Exists"
      effect: "NoExecute"
      tolerationSeconds: 1

strategy:
  type: Recreate