# Default values — override per customer in customers/<name>/values.yaml

image:
  backend:
    repository: git.lunarfront.tech/ryan/lunarfront-app
    tag: latest
    pullPolicy: Always
  frontend:
    repository: git.lunarfront.tech/ryan/lunarfront-frontend
    tag: latest
    pullPolicy: Always

# Customer-specific — must be overridden
customer:
  name: ""       # used for namespace and labels
  domain: ""     # e.g. customer.lunarfront.tech

# Database — each customer gets their own database on the shared cluster
database:
  host: ""
  port: 5432
  name: ""
  # credentials come from a Secret
  secretName: lunarfront-db-credentials

# Redis/Valkey
redis:
  host: ""
  port: 6379
  secretName: lunarfront-redis-credentials

# JWT secret
auth:
  secretName: lunarfront-auth-secret

# Storage
storage:
  secretName: lunarfront-storage-secret

# Cloudflare origin cert — installed once as a cluster-wide secret
# See: https://developers.cloudflare.com/ssl/origin-configuration/origin-ca
cloudflare:
  originCertSecret: cloudflare-origin-cert

replicaCount: 1

resources:
  backend:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      cpu: 500m
      memory: 512Mi
  frontend:
    requests:
      cpu: 50m
      memory: 64Mi
    limits:
      cpu: 200m
      memory: 128Mi