gitea:
  admin:
    username: ryan
    email: ryan@lunarfront.tech
    existingSecret: gitea-admin-secret

  config:
    server:
      DOMAIN: git.lunarfront.tech
      ROOT_URL: https://git.lunarfront.tech
      SSH_DOMAIN: git-ssh.lunarfront.tech
      SSH_PORT: 22
      START_SSH_SERVER: true
    database:
      DB_TYPE: postgres
      SSL_MODE: disable
    session:
      PROVIDER: db
    cache:
      ADAPTER: memory
    queue:
      TYPE: level
    actions:
      ENABLED: true

  additionalConfigFromEnvs:
    - name: GITEA__database__HOST
      valueFrom:
        secretKeyRef:
          name: gitea-db
          key: host
    - name: GITEA__database__NAME
      valueFrom:
        secretKeyRef:
          name: gitea-db
          key: database
    - name: GITEA__database__USER
      valueFrom:
        secretKeyRef:
          name: gitea-db
          key: user
    - name: GITEA__database__PASSWD
      valueFrom:
        secretKeyRef:
          name: gitea-db
          key: password

# Disable built-in Postgres and Valkey
postgresql-ha:
  enabled: false

postgresql:
  enabled: false

valkey-cluster:
  enabled: false

valkey:
  enabled: false

persistence:
  enabled: true
  size: 20Gi
  storageClass: do-block-storage

service:
  ssh:
    type: ClusterIP
    clusterIP: None
    port: 22
    annotations:
      external-dns.alpha.kubernetes.io/hostname: git-ssh.lunarfront.tech
      external-dns.alpha.kubernetes.io/target: "167.99.21.170"

ingress:
  enabled: true
  className: nginx
  annotations:
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/proxy-body-size: "0"
    cert-manager.io/cluster-issuer: letsencrypt-prod
  hosts:
    - host: git.lunarfront.tech
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: git-lunarfront-tech-tls
      hosts:
        - git.lunarfront.tech

strategy:
  type: Recreate

nodeSelector:
  role: system

resources:
  requests:
    cpu: 200m
    memory: 256Mi
  limits:
    cpu: 1000m
    memory: 512Mi