description:"Stops All Running pods and hibernates cnpg"
schema:
type:boolean
default:false
- variable:workload
group:"Workload Settings"
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:main
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:type
label:Type (Advanced)
schema:
type:string
default:Deployment
enum:
- value:Deployment
description:Deployment
- value:DaemonSet
description:DaemonSet
- variable:replicas
label:Replicas (Advanced)
description:Set the number of Replicas
schema:
type:int
show_if:[["type","!=","DaemonSet"]]
default:1
- variable:podSpec
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:containers
label:Containers
schema:
additional_attrs:true
type:dict
attrs:
- variable:main
label:Main Container
schema:
additional_attrs:true
type:dict
attrs:
- variable:envList
label:Extra Environment Variables
description:"Please be aware that some variables are set in the background, adding duplicates here might cause issues or prevent the app from starting..."
schema:
type:list
default:[]
items:
- variable:envItem
label:Environment Variable
schema:
additional_attrs:true
type:dict
attrs:
- variable:name
label:Name
schema:
type:string
- variable:value
label:Value
schema:
type:string
- variable:extraArgs
label:Extra Args
schema:
type:list
default:[]
items:
- variable:arg
label:Arg
schema:
type:string
- variable:advanced
label:Show Advanced Settings
description:Advanced settings are not covered by TrueCharts Support
description:Must be a valid and public FQDN for ACME SSL issuance to function. Include https://
schema:
type:string
required:true
default:""
- variable:trusted_proxies
label:Trusted Proxies
description:List of trusted reverse proxies.
schema:
type:list
default:[]
items:
- variable:proxy
label:Proxy IP
schema:
type:string
required:true
default:""
- variable:private_clients
label:Private Clients
description:List of trusted clients.
schema:
type:list
default:[]
items:
- variable:client_ip
label:Client IP
schema:
type:string
required:true
default:""
- variable:secure_cookies
label:Secure Cookies
description:Enable or disable requiring secure cookies. Required for HTTPS.
schema:
type:boolean
default:true
- variable:admin
label:Admin Configuration
schema:
additional_attrs:true
type:dict
attrs:
- variable:reset_admin_on_boot
label:Reset Admin On Boot
description:to create or reset the admin password every time Firezone starts. By default, the admin password is only set when Firezone is installed.
schema:
type:boolean
default:true
- variable:default_email
label:Default Email
description:Primary administrator email.
schema:
type:string
required:true
default:""
- variable:default_password
label:Default Password
description:Default password that will be used for creating or resetting the primary administrator account.
schema:
type:string
required:true
private:true
default:""
- variable:devices
label:Devices Configuration
schema:
additional_attrs:true
type:dict
attrs:
- variable:allow_unprivileged_device_management
label:Allow Unprivileged Device Management
description:Enable or disable management of devices on unprivileged accounts.
schema:
type:boolean
default:true
- variable:allow_unprivileged_device_config
label:Allow Unprivileged Device Configuration
description:Enable or disable configuration of device network settings for unprivileged users.
schema:
type:boolean
default:true
- variable:vpn_session_duration
label:VPN Session Duration
description:Optionally require users to periodically authenticate to the Firezone web UI in order to keep their VPN sessions active.
schema:
type:int
default:0
- variable:client_persistent_keepalive
label:Client Persistent KeepAlive
description:If you experience NAT or firewall traversal problems, you can enable this to send a keepalive packet every 25 seconds, disabled by setting it to 0.
schema:
type:int
default:0
- variable:default_client_mtu
label:Default Client MTU
description:WireGuard interface MTU for devices.
schema:
type:int
default:1280
- variable:client_endpoint
label:Client Endpoint
description:IPv4 address, or FQDN that devices will be configured to connect to.
schema:
type:string
required:true
default:""
- variable:client_dns
label:Client DNS
description:List of DNS servers to use for devices.
schema:
type:list
empty:false
required:true
default:
- 1.1.1.1
- 1.0.0.1
items:
- variable:dns
label:DNS
schema:
type:string
required:true
default:""
- variable:client_allowed_ips
label:Client Allowed Ips
description:Configures the default AllowedIPs setting for devices.
schema:
type:list
empty:false
default:
- 0.0.0.0/0
items:
- variable:ip
label:IP
schema:
type:string
required:true
default:""
- variable:max_devices_per_user
label:Max Devices Per User
description:Changes how many devices a user can have at a time.
schema:
type:int
default:10
- variable:authorization
label:Authorization Configuration
schema:
additional_attrs:true
type:dict
attrs:
- variable:local_auth_enabled
label:Local Auth Enabled
description:Enable or disable the local authentication method for all users.
schema:
type:boolean
default:true
- variable:disable_vpn_on_oidc_error
label:Disable VPN On OIDC Error
description:Enable or disable auto disabling VPN connection on OIDC refresh error.
schema:
type:boolean
default:false
- variable:wireguard
label:Wireguard Configuration
schema:
additional_attrs:true
type:dict
attrs:
- variable:ipv4_masquerade_enabled
label:IPv4 Masquerade Enabled
description:Enable or disable IPv4 masqeurading.
schema:
type:boolean
default:true
- variable:connectivity
label:Connectivity Configuration
schema:
additional_attrs:true
type:dict
attrs:
- variable:checks_enabled
label:Checks Enabled
description:Enable / disable periodic checking for egress connectivity.
schema:
type:boolean
default:true
- variable:checks_interval
label:Checks Interval
description:Periodicity in seconds to check for egress connectivity.
schema:
type:int
default:43200
- variable:other
label:Other Configuration
schema:
additional_attrs:true
type:dict
attrs:
- variable:telemetry_enabled
label:Telemetry Enabled
description:Enable or disable the Firezone telemetry collection.
description:Path inside the container the device is mounted
schema:
type:string
default:"/dev/ttyACM0"
- variable:cnpg
group:Postgresql
label:"CloudNative-PG (CNPG)"
schema:
additional_attrs:true
type:dict
attrs:
- variable:main
label:"Main Postgresql Database"
schema:
additional_attrs:true
type:dict
attrs:
- variable:hibernate
label:Hibernate
description:"enable to safely hibernate and shutdown the postgresql cluster"
schema:
type:boolean
default:false
- variable:mode
label:Mode
description: 'Cluster mode of operation. Available modes:standalone - default mode. Creates new or updates an existing CNPG cluster. recovery - Same as standalone but creates a cluster from a backup, object store or via pg_basebackup replica - Creates a replica cluster from an existing CNPG cluster.# TODO.'
schema:
type:string
default:"standalone"
enum:
- value:standalone
description:standalone
- value:replica
description:replica
- value:recovery
description:recovery
- variable:cluster
label:"Cluster Settings"
schema:
additional_attrs:true
type:dict
attrs:
- variable:instances
label:Instances
schema:
type:int
default:1
- variable:singleNode
label:singleNode
schema:
type:boolean
default:true
hidden:true
- variable:storage
label:"Storage"
schema:
additional_attrs:true
type:dict
attrs:
- variable:size
label:Size
schema:
type:string
default:"256Gi"
- variable:walStorage
label:"WAL Storage"
schema:
additional_attrs:true
type:dict
attrs:
- variable:size
label:Size
schema:
type:string
default:"256Gi"
- variable:monitoring
label:"Monitoring Settings"
schema:
additional_attrs:true
type:dict
attrs:
- variable:enablePodMonitor
label:"enablePodMonitor"
schema:
type:boolean
default:true
- variable:disableDefaultQueries
label:"disableDefaultQueries"
schema:
type:boolean
default:false
- variable:pooler
label:"Pooler Settings"
schema:
additional_attrs:true
type:dict
attrs:
- variable:instances
label:Instances
schema:
type:int
default:1
- variable:createRO
label:"Create ReadOnly Instance"
schema:
type:boolean
default:false
- variable:recovery
label:"Recovery Settings (Experimental)"
schema:
additional_attrs:true
type:dict
attrs:
- variable:enabled
label:"enabled"
schema:
type:boolean
default:false
- variable:endpointURL
label:"endpointURL"
schema:
type:string
show_if:[["enabled","=",true]]
default:""
- variable:method
label:"method"
schema:
type:string
show_if:[["enabled","=",true]]
default:"object_store"
- variable:backupName
label:"backupName"
schema:
type:string
show_if:[["enabled","=",true]]
default:""
- variable:provider
label:"provider"
schema:
type:string
show_if:[["enabled","=",true]]
default:"s3"
enum:
- value:s3
description:S3
- value:azure
description:Azure
- value:google
description:Google
- variable:s3
label:"s3"
schema:
additional_attrs:true
type:dict
show_if:[["provider","=","s3"]]
attrs:
- variable:region
label:"region"
schema:
type:string
default:""
- variable:bucket
label:"bucket"
schema:
type:string
default:""
- variable:path
label:"path"
schema:
type:string
default:"/"
- variable:accessKey
label:"accessKey"
schema:
type:string
default:""
- variable:secretKey
label:"secretKey"
schema:
type:string
default:""
- variable:azure
label:"azure (EXTREMELY EXPERIMENTAL)"
schema:
additional_attrs:true
type:dict
show_if:[["provider","=","azure"]]
attrs:
- variable:path
label:"path"
schema:
type:string
default:"/"
- variable:connectionString
label:"connectionString"
schema:
type:string
default:""
- variable:storageAccount
label:"storageAccount"
schema:
type:string
default:""
- variable:storageKey
label:"storageKey"
schema:
type:string
default:""
- variable:storageSasToken
label:"storageSasToken"
schema:
type:string
default:""
- variable:containerName
label:"containerName"
schema:
type:string
default:""
- variable:serviceName
label:"serviceName"
schema:
type:string
default:"blob"
- variable:inheritFromAzureAD
label:"inheritFromAzureAD"
schema:
type:boolean
default:false
- variable:google
label:"google (EXTREMELY EXPERIMENTAL)"
schema:
additional_attrs:true
type:dict
show_if:[["provider","=","google"]]
attrs:
- variable:path
label:"path"
schema:
type:string
default:"/"
- variable:bucket
label:"bucket"
schema:
type:string
default:""
- variable:gkeEnvironment
label:"gkeEnvironment"
schema:
type:string
default:""
- variable:applicationCredentials
label:"applicationCredentials"
schema:
type:string
default:""
- variable:backups
label:"Backup Settings (Experimental)"
schema:
additional_attrs:true
type:dict
attrs:
- variable:enabled
label:"enabled"
schema:
type:boolean
default:false
- variable:endpointURL
label:"endpointURL"
schema:
type:string
show_if:[["enabled","=",true]]
default:""
- variable:destinationPath
label:"destinationPath"
schema:
type:string
show_if:[["enabled","=",true]]
default:""
- variable:retentionPolicy
label:"retentionPolicy"
schema:
type:string
show_if:[["enabled","=",true]]
default:"30d"
- variable:provider
label:"provider"
schema:
type:string
show_if:[["enabled","=",true]]
default:"s3"
enum:
- value:s3
description:S3
- value:azure
description:Azure
- value:google
description:Google
- variable:s3
label:"s3"
schema:
additional_attrs:true
type:dict
show_if:[["provider","=","s3"]]
attrs:
- variable:region
label:"region"
schema:
type:string
default:""
- variable:bucket
label:"bucket"
schema:
type:string
default:""
- variable:path
label:"path"
schema:
type:string
default:"/"
- variable:accessKey
label:"accessKey"
schema:
type:string
default:""
- variable:secretKey
label:"secretKey"
schema:
type:string
default:""
- variable:azure
label:"azure (EXTREMELY EXPERIMENTAL)"
schema:
additional_attrs:true
type:dict
show_if:[["provider","=","azure"]]
attrs:
- variable:path
label:"path"
schema:
type:string
default:"/"
- variable:connectionString
label:"connectionString"
schema:
type:string
default:""
- variable:storageAccount
label:"storageAccount"
schema:
type:string
default:""
- variable:storageKey
label:"storageKey"
schema:
type:string
show_if:[["enabled","=",true]]
default:""
- variable:storageSasToken
label:"storageSasToken"
schema:
type:string
default:""
- variable:containerName
label:"containerName"
schema:
type:string
default:""
- variable:serviceName
label:"serviceName"
schema:
type:string
default:"blob"
- variable:inheritFromAzureAD
label:"inheritFromAzureAD"
schema:
type:boolean
default:false
- variable:google
label:"google (EXTREMELY EXPERIMENTAL)"
schema:
additional_attrs:true
type:dict
show_if:[["provider","=","google"]]
attrs:
- variable:path
label:"path"
schema:
type:string
default:"/"
- variable:bucket
label:"bucket"
schema:
type:string
default:""
- variable:gkeEnvironment
label:"gkeEnvironment"
schema:
type:string
default:""
- variable:applicationCredentials
label:"applicationCredentials"
schema:
type:string
default:""
- variable:scheduledBackups
label:ScheduledBackups
schema:
type:list
default:[]
show_if:[["enabled","=",true]]
items:
- variable:backupschedule
label:BackupSchedule
schema:
additional_attrs:true
type:dict
attrs:
- variable:name
label:name
schema:
type:string
default:"daily-backup"
required:true
- variable:schedule
label:schedule
schema:
type:string
required:true
default:"0 0 0 * * *"
- variable:backupOwnerReference
label:backupOwnerReference
schema:
type:string
required:true
default:"self"
- variable:immediate
label:immediate
schema:
type:boolean
default:false
- variable:suspend
label:suspend
schema:
type:boolean
default:false
- variable:manualBackups
label:manualBackups
schema:
type:list
default:[]
show_if:[["enabled","=",true]]
items:
- variable:backup
label:Backup
schema:
additional_attrs:true
type:dict
attrs:
- variable:name
label:name
schema:
type:string
default:""
required:true
# - variable: horizontalPodAutoscaler
# group: Advanced
# label: (Advanced) Horizontal Pod Autoscaler
# schema:
# type: list
# default: []
# items:
# - variable: hpaEntry
# label: HPA Entry
# schema:
# additional_attrs: true
# type: dict
# attrs:
# - variable: name
# label: Name
# schema:
# type: string
# required: true
# default: ""
# - variable: enabled
# label: Enabled
# schema:
# type: boolean
# default: false
# show_subquestions_if: true
# subquestions:
# - variable: target
# label: Target
# description: Deployment name, Defaults to Main Deployment
# schema:
# type: string
# default: ""
# - variable: minReplicas
# label: Minimum Replicas
# schema:
# type: int
# default: 1
# - variable: maxReplicas
# label: Maximum Replicas
# schema:
# type: int
# default: 5
# - variable: targetCPUUtilizationPercentage
# label: Target CPU Utilization Percentage
# schema:
# type: int
# default: 80
# - variable: targetMemoryUtilizationPercentage
# label: Target Memory Utilization Percentage
# schema:
# type: int
# default: 80
- variable:networkPolicy
group:Advanced
label:(Advanced) Network Policy
schema:
type:list
default:[]
items:
- variable:netPolicyEntry
label:Network Policy Entry
schema:
additional_attrs:true
type:dict
attrs:
- variable:name
label:Name
schema:
type:string
required:true
default:""
- variable:enabled
label:Enabled
schema:
type:boolean
default:false
show_subquestions_if:true
subquestions:
- variable:policyType
label:Policy Type
schema:
type:string
default:""
enum:
- value:""
description:Default
- value:ingress
description:Ingress
- value:egress
description:Egress
- value:ingress-egress
description:Ingress and Egress
- variable:egress
label:Egress
schema:
type:list
default:[]
items:
- variable:egressEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:to
label:To
schema:
type:list
default:[]
items:
- variable:toEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:ipBlock
label:IP Block
schema:
additional_attrs:true
type:dict
attrs:
- variable:cidr
label:CIDR
schema:
type:string
default:""
- variable:except
label:Except
schema:
type:list
default:[]
items:
- variable:exceptint
label:""
schema:
type:string
- variable:namespaceSelector
label:Namespace Selector
schema:
additional_attrs:true
type:dict
attrs:
- variable:matchExpressions
label:Match Expressions
schema:
type:list
default:[]
items:
- variable:expressionEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:key
label:Key
schema:
type:string
- variable:operator
label:Operator
schema:
type:string
default:TCP
enum:
- value:In
description:In
- value:NotIn
description:NotIn
- value:Exists
description:Exists
- value:DoesNotExist
description:DoesNotExist
- variable:values
label:Values
schema:
type:list
default:[]
items:
- variable:value
label:""
schema:
type:string
- variable:podSelector
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:matchExpressions
label:Match Expressions
schema:
type:list
default:[]
items:
- variable:expressionEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:key
label:Key
schema:
type:string
- variable:operator
label:Operator
schema:
type:string
default:TCP
enum:
- value:In
description:In
- value:NotIn
description:NotIn
- value:Exists
description:Exists
- value:DoesNotExist
description:DoesNotExist
- variable:values
label:Values
schema:
type:list
default:[]
items:
- variable:value
label:""
schema:
type:string
- variable:ports
label:Ports
schema:
type:list
default:[]
items:
- variable:portsEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:port
label:Port
schema:
type:int
- variable:endPort
label:End Port
schema:
type:int
- variable:protocol
label:Protocol
schema:
type:string
default:TCP
enum:
- value:TCP
description:TCP
- value:UDP
description:UDP
- value:SCTP
description:SCTP
- variable:ingress
label:Ingress
schema:
type:list
default:[]
items:
- variable:ingressEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:from
label:From
schema:
type:list
default:[]
items:
- variable:fromEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:ipBlock
label:IP Block
schema:
additional_attrs:true
type:dict
attrs:
- variable:cidr
label:CIDR
schema:
type:string
default:""
- variable:except
label:Except
schema:
type:list
default:[]
items:
- variable:exceptint
label:""
schema:
type:string
- variable:namespaceSelector
label:Namespace Selector
schema:
additional_attrs:true
type:dict
attrs:
- variable:matchExpressions
label:Match Expressions
schema:
type:list
default:[]
items:
- variable:expressionEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:key
label:Key
schema:
type:string
- variable:operator
label:Operator
schema:
type:string
default:TCP
enum:
- value:In
description:In
- value:NotIn
description:NotIn
- value:Exists
description:Exists
- value:DoesNotExist
description:DoesNotExist
- variable:values
label:Values
schema:
type:list
default:[]
items:
- variable:value
label:""
schema:
type:string
- variable:podSelector
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:matchExpressions
label:Match Expressions
schema:
type:list
default:[]
items:
- variable:expressionEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:key
label:Key
schema:
type:string
- variable:operator
label:Operator
schema:
type:string
default:TCP
enum:
- value:In
description:In
- value:NotIn
description:NotIn
- value:Exists
description:Exists
- value:DoesNotExist
description:DoesNotExist
- variable:values
label:Values
schema:
type:list
default:[]
items:
- variable:value
label:""
schema:
type:string
- variable:ports
label:Ports
schema:
type:list
default:[]
items:
- variable:portsEntry
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:port
label:Port
schema:
type:int
- variable:endPort
label:End Port
schema:
type:int
- variable:protocol
label:Protocol
schema:
type:string
default:TCP
enum:
- value:TCP
description:TCP
- value:UDP
description:UDP
- value:SCTP
description:SCTP
- variable:addons
group:Addons
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:codeserver
label:Codeserver
schema:
additional_attrs:true
type:dict
attrs:
- variable:enabled
label:Enabled
schema:
type:boolean
default:false
show_subquestions_if:true
subquestions:
- variable:service
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:type
label:Service Type
description:"ClusterIP's are only internally available and Loadbalancer exposes the service using the system loadbalancer"
schema:
type:string
default:LoadBalancer
enum:
- value:NodePort
description:Deprecated CHANGE THIS
- value:ClusterIP
description:ClusterIP
- value:LoadBalancer
description:LoadBalancer
- variable:loadBalancerIP
label:LoadBalancer IP
description:"MetalLB Only: Selects the Loadbalancer IP to expose on. Required when using PortalButton with MetalLB"
schema:
show_if:[["type","=","LoadBalancer"]]
type:string
default:""
- variable:ports
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:codeserver
label:""
schema:
additional_attrs:true
type:dict
attrs:
- variable:port
label:Port
schema:
type:int
default:36107
- variable:ingress
label:"Ingress"
schema:
additional_attrs:true
type:dict
attrs:
- variable:enabled
label:Enable Ingress
schema:
type:boolean
default:false
show_subquestions_if:true
subquestions:
- variable:hosts
label:Hosts
schema:
type:list
default:[]
items:
- variable:hostEntry
label:Host
schema:
additional_attrs:true
type:dict
attrs:
- variable:host
label:HostName
schema:
type:string
default:""
required:true
- variable:paths
label:Paths
schema:
type:list
default:[{path:"/", pathType:"Prefix"}]
items:
- variable:pathEntry
label:Host
schema:
additional_attrs:true
type:dict
attrs:
- variable:path
label:Path
schema:
type:string
required:true
default:"/"
- variable:pathType
label:Path Type
schema:
type:string
required:true
default:Prefix
- variable:integrations
label:Integrations
description:Connect ingress with other charts
schema:
additional_attrs:true
type:dict
attrs:
- variable:traefik
label:Traefik
description:Connect ingress with Traefik
schema:
additional_attrs:true
type:dict
attrs:
- variable:enabled
label:enabled
schema:
type:boolean
default:true
- variable:allowCors
label:'Allow Cross Origin Requests (advanced)'
schema:
type:boolean
default:false
show_if:[["enabled","=",true]]
- variable:entrypoints
label:Entrypoints
schema:
type:list
default:["websecure"]
show_if:[["enabled","=",true]]
items:
- variable:entrypoint
label:Entrypoint
schema:
type:string
- variable:middlewares
label:Middlewares
schema:
type:list
default:[]
show_if:[["enabled","=",true]]
items:
- variable:middleware
label:Middleware
schema:
additional_attrs:true
type:dict
attrs:
- variable:name
label:name
schema:
type:string
default:""
required:true
- variable:namespace
label:'namespace (optional)'
schema:
type:string
default:""
- variable:certManager
label:certManager
description:Connect ingress with certManager
schema:
additional_attrs:true
type:dict
attrs:
- variable:enabled
label:enabled
schema:
type:boolean
default:false
- variable:certificateIssuer
label:certificateIssuer
description:defaults to chartname
schema:
type:string
default:""
show_if:[["enabled","=",true]]
- variable:advanced
label:Show Advanced Settings
description:Advanced settings are not covered by TrueCharts Support
schema:
type:boolean
default:false
- variable:ingressClassName
label:(Advanced/Optional) IngressClass Name
schema:
type:string
show_if:[["advanced","=",true]]
default:""
- variable:tls
label:TLS-Settings
schema:
type:list
show_if:[["advanced","=",true]]
default:[]
items:
- variable:tlsEntry
label:Host
schema:
additional_attrs:true
type:dict
attrs:
- variable:hosts
label:Certificate Hosts
schema:
type:list
default:[]
items:
- variable:host
label:Host
schema:
type:string
default:""
required:true
- variable:certificateIssuer
label:Use Cert-Manager clusterIssuer
description:'add the name of your cert-manager clusterIssuer here for automatic tls certificates.'
schema:
type:string
default:""
- variable:clusterCertificate
label:'Cluster Certificate (Advanced)'
description:'Add the name of your cluster-wide certificate, that you set up in the ClusterIssuer chart.'