global:
  nameOverride: ""
  fullnameOverride: ""
  storageClass: ""

  tailscale:
    enabled: true
    ingressClassName: tailscale
    tailnetFQDN: "" # e.g. tailxyz.ts.net
    proxyGroup:
      enabled: false
      create: false
      name: ingress-proxies
      tags: []

scheduling:
  compute:
    affinity:
      nodeAffinity:
        requiredDuringSchedulingIgnoredDuringExecution:
          nodeSelectorTerms:
            - matchExpressions:
                - key: node-class
                  operator: In
                  values:
                    - compute
    tolerations: []

app:
  name: porthole
  queueName: tline

  # Optional overrides when bringing your own services.
  databaseUrl: "" # defaults to in-chart Postgres when empty
  redisUrl: "" # defaults to in-chart Redis when empty

  minio:
    bucket: media
    region: us-east-1
    presignExpiresSeconds: 900
    publicEndpointTs: "" # optional if global.tailscale.tailnetFQDN is set (defaults to https://minio.<tailnet-fqdn>)
    internalEndpoint: "" # defaults to in-chart MinIO when empty

secrets:
  existingSecret: "" # if set, chart will not create secrets

  postgres:
    user: tline
    password: "" # REQUIRED if not using existingSecret
    database: tline

  minio:
    accessKeyId: "" # REQUIRED if not using existingSecret
    secretAccessKey: "" # REQUIRED if not using existingSecret

images:
  web:
    repository: ""
    tag: ""
    pullPolicy: IfNotPresent
  worker:
    repository: ""
    tag: ""
    pullPolicy: IfNotPresent
  postgres:
    repository: postgres
    tag: "16"
    pullPolicy: IfNotPresent
  redis:
    repository: redis
    tag: "7"
    pullPolicy: IfNotPresent
  minio:
    repository: minio/minio
    tag: RELEASE.2024-01-16T16-07-38Z
    pullPolicy: IfNotPresent

# Optional: secrets used for pulling container images.
# Each entry is a Secret name in the same namespace.
imagePullSecrets: []

# Optional: create a docker-registry Secret from values.
# This is convenient for private/local deployments, but stores credentials in values.
registrySecret:
  create: false
  name: "" # defaults to <release>-<chart>-registry
  server: "" # e.g. registry.lan:5000
  username: ""
  password: ""
  email: ""

web:
  enabled: true
  replicas: 1
  schedulingClass: compute
  service:
    port: 3000
  resources:
    requests:
      cpu: 200m
      memory: 256Mi
    limits:
      cpu: 1000m
      memory: 1Gi

  ingress:
    enabled: true
    hostnameLabel: app
    path: /
    pathType: Prefix
    tags: []
    funnel: false
    extraAnnotations: {}

worker:
  enabled: true
  replicas: 1
  schedulingClass: compute
  resources:
    requests:
      cpu: 500m
      memory: 1Gi
    limits:
      cpu: 2000m
      memory: 2Gi

postgres:
  enabled: true
  schedulingClass: compute
  service:
    port: 5432
  storage:
    size: 20Gi
    storageClass: "" # defaults to global.storageClass
  resources:
    requests:
      cpu: 500m
      memory: 1Gi
    limits:
      cpu: 1500m
      memory: 2Gi

redis:
  enabled: true
  schedulingClass: compute
  service:
    port: 6379
  resources:
    requests:
      cpu: 50m
      memory: 128Mi
    limits:
      cpu: 300m
      memory: 512Mi

minio:
  enabled: true
  schedulingClass: compute
  service:
    s3Port: 9000
    consolePort: 9001

  # Optional: expose MinIO S3 API via a Tailscale LoadBalancer Service
  # instead of (or in addition to) Tailscale Ingress.
  # This can be more reliable for streaming / Range requests depending on
  # Tailscale operator + cluster behavior.
  tailscaleServiceS3:
    enabled: false
    hostnameLabel: minio
    tags: []
    extraAnnotations: {}

  tailscaleServiceConsole:
    enabled: false
    hostnameLabel: minio-console
    tags: []
    extraAnnotations: {}

  # When true, disable the MinIO S3 Ingress when S3 service is enabled.
  ingressS3DisabledWhenTailscaleService: true

  # When true, disable the MinIO console Ingress when console service is enabled.
  ingressConsoleDisabledWhenTailscaleService: true

  storage:
    size: 200Gi
    storageClass: "" # defaults to global.storageClass

  resources:
    requests:
      cpu: 250m
      memory: 512Mi
    limits:
      cpu: 1500m
      memory: 2Gi

  ingressS3:
    enabled: true
    hostnameLabel: minio
    path: /
    pathType: Prefix
    tags: []
    funnel: false
    extraAnnotations: {}

  ingressConsole:
    enabled: true
    hostnameLabel: minio-console
    path: /
    pathType: Prefix
    tags: []
    funnel: false
    extraAnnotations: {}

jobs:
  ensureBucket:
    enabled: false
    image:
      repository: minio/mc
      tag: RELEASE.2024-01-16T16-07-38Z
      pullPolicy: IfNotPresent
    resources:
      requests:
        cpu: 50m
        memory: 64Mi
      limits:
        cpu: 300m
        memory: 256Mi

  migrate:
    enabled: true
    image:
      repository: "" # defaults to images.worker.repository when empty
      tag: "" # defaults to images.worker.tag when empty
      pullPolicy: "" # defaults to images.worker.pullPolicy when empty

cronjobs:
  cleanupStaging:
    enabled: false
    schedule: "0 4 * * *"
    # Remove objects under `staging/` older than this many days.
    # This CronJob must never touch `originals/`.
    olderThanDays: 14
    image:
      repository: minio/mc
      tag: RELEASE.2024-01-16T16-07-38Z
      pullPolicy: IfNotPresent
    resources:
      requests:
        cpu: 50m
        memory: 64Mi
      limits:
        cpu: 300m
        memory: 256Mi