image:
  repository: tccr.io/truecharts/paperless-ng
  pullPolicy: IfNotPresent
  tag: 1.13.0@sha256:f8836b6d50f6dad48fc4692ede49c56275677f3d387be76e560e285123e0b8e1

securityContext:
  runAsNonRoot: false
  readOnlyRootFilesystem: false

podSecurityContext:
  runAsUser: 0
  runAsGroup: 0

secretEnv:
  PAPERLESS_ADMIN_USER: "admin"
  PAPERLESS_ADMIN_PASSWORD: "admin"
  PAPERLESS_ADMIN_MAIL: "admin@admin.com"

env:
  PAPERLESS_PORT: "{{ .Values.service.main.ports.main.targetPort }}"
  PAPERLESS_DATA_DIR: "/data/"
  PAPERLESS_CONSUMPTION_DIR: "/consume/"
  PAPERLESS_MEDIA_ROOT: "/media/"
  PAPERLESS_URL: ""
  USERMAP_UID: "{{ .Values.security.PUID }}"
  USERMAP_GID: "{{ .Values.podSecurityContext.fsGroup }}"
  PAPERLESS_TIME_ZONE: "{{ .Values.TZ }}"
  PAPERLESS_DBNAME: "{{ .Values.postgresql.postgresqlDatabase }}"
  PAPERLESS_DBUSER: "{{ .Values.postgresql.postgresqlUsername }}"
  PAPERLESS_DBPORT: "5432"
  PAPERLESS_WEBSERVER_WORKERS: 2
  PAPERLESS_DBPASS:
    secretKeyRef:
      name: dbcreds
      key: postgresql-password
  PAPERLESS_DBHOST:
    secretKeyRef:
      name: dbcreds
      key: plainhost
  PAPERLESS_SECRET_KEY:
    secretKeyRef:
      name: paperlessng-secrets
      key: PAPERLESS_SECRET_KEY
  PAPERLESS_REDIS:
    secretKeyRef:
      name: rediscreds
      key: url

service:
  main:
    ports:
      main:
        targetPort: 8000
        port: 10140

persistence:
  data:
    enabled: true
    mountPath: "/data"
  consume:
    enabled: true
    mountPath: "/consume"
  media:
    enabled: true
    mountPath: "/media"

redis:
  enabled: true
  existingSecret: "rediscreds"
  redisUsername: default

postgresql:
  enabled: true
  existingSecret: "dbcreds"
  postgresqlUsername: paperless-ng
  postgresqlDatabase: paperless-ng

portal:
  enabled: true