From e3fe6bac3ec04cdbab98244349d1878162233e7b Mon Sep 17 00:00:00 2001
From: Ryan Moon <moonryan2009@gmail.com>
Date: Thu, 2 Apr 2026 21:39:54 -0500
Subject: [PATCH] feat: add Windmill deployment

---
 argocd/windmill-app.yaml | 26 ++++++++++++++++++++++
 windmill/values.yaml     | 47 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 73 insertions(+)
 create mode 100644 argocd/windmill-app.yaml
 create mode 100644 windmill/values.yaml

diff --git a/argocd/windmill-app.yaml b/argocd/windmill-app.yaml
new file mode 100644
index 0000000..d4114d4
--- /dev/null
+++ b/argocd/windmill-app.yaml
@@ -0,0 +1,26 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: windmill
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://windmilleng.github.io/windmill-helm-charts
+      chart: windmill
+      targetRevision: "2.*"
+      helm:
+        valueFiles:
+          - $values/windmill/values.yaml
+    - repoURL: ssh://git@git-ssh.lunarfront.tech/ryan/lunarfront-charts.git
+      targetRevision: main
+      ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: windmill
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
diff --git a/windmill/values.yaml b/windmill/values.yaml
new file mode 100644
index 0000000..a665b59
--- /dev/null
+++ b/windmill/values.yaml
@@ -0,0 +1,47 @@
+windmill:
+  databaseUrlSecretName: windmill-db
+  databaseUrlSecretKey: url
+  baseUrl: https://windmill.lunarfront.tech
+  cookieDomain: lunarfront.tech
+
+  app:
+    resources:
+      requests:
+        cpu: 100m
+        memory: 256Mi
+      limits:
+        cpu: 1000m
+        memory: 512Mi
+
+  worker:
+    replicas: 1
+    resources:
+      requests:
+        cpu: 100m
+        memory: 256Mi
+      limits:
+        cpu: 2000m
+        memory: 2Gi
+
+  lsp:
+    enabled: false
+
+postgresql:
+  enabled: false
+
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/proxy-body-size: "0"
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  hosts:
+    - host: windmill.lunarfront.tech
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - secretName: windmill-lunarfront-tech-tls
+      hosts:
+        - windmill.lunarfront.tech