image:
  repository: tccr.io/truecharts/etesync
  pullPolicy: IfNotPresent
  tag: 0.11.0@sha256:47478da0d1b3ab18d5bfbcd4537fa80305ace94746b01c32e609c7e9e663d860

securityContext:
  container:
    runAsUser: 373
    runAsGroup: 373
    readOnlyRootFilesystem: false
  pod:
    fsGroup: 373

# Docker image configuration docs:
# https://github.com/victor-rds/docker-etebase#settings-and-customization

# EteSync configuration docs:
# https://github.com/etesync/server#configuration

workload:
  main:
    podSpec:
      containers:
        main:
          probes:
            liveness:
              type: tcp
            readiness:
              type: tcp
            startup:
              type: tcp
          env:
            PORT: "{{ .Values.service.main.ports.main.port }}"
            # App
            SERVER: http
            AUTO_UPDATE: true
            ALLOWED_HOSTS: "localhost"
            AUTO_SIGNUP: false
            LANGUAGE_CODE: "en-us"
            TIME_ZONE: "{{ .Values.TZ }}"

            # Debugging
            DEBUG: false
            SHELL_DEBUG: false
            DEBUG_DJANGO: false

            # Postgres
            DB_ENGINE: postgres
            DATABASE_NAME: "{{ .Values.cnpg.main.database }}"
            DATABASE_USER: "{{ .Values.cnpg.main.user }}"
            DATABASE_PASSWORD:
              secretKeyRef:
                name: cnpg-main-user
                key: password
            DATABASE_HOST:
              secretKeyRef:
                name: cnpg-main-urls
                key: host
            DATABASE_PORT: 5432
            REDIS_URI:
              secretKeyRef:
                expandObjectName: false
                name: '{{ printf "%s-%s" .Release.Name "rediscreds" }}'
                key: url
            # Superuser
            SUPER_USER: "admin"
            SUPER_PASS: ""
            SUPER_EMAIL: ""
service:
  main:
    ports:
      main:
        protocol: http
        port: 10254

persistence:
  app:
    enabled: true
    mountPath: "/data"
  secret:
    enabled: true
    type: secret
    readOnly: true
    mountPath: "/data/secret.txt"
    subPath: "secret.txt"
    objectName: "etesync-secret"

# Enabled postgres
cnpg:
  main:
    enabled: true
    user: etesync
    database: etesync

redis:
  enabled: true

portal:
  open:
    enabled: true