image:
  repository: tccr.io/truecharts/firefox-syncserver
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: v1.8.0@sha256:13d5d1beae0e7ea4298224abbc415de837200b8402d676e856601a63dc8432ed

securityContext:
  container:
    readOnlyRootFilesystem: false
    allowPrivilegeEscalation: true
    runAsNonRoot: false
    runAsUser: 0
    runAsGroup: 0

workload:
  main:
    podSpec:
      containers:
        main:
          probes:
            liveness:
              type: tcp
            readiness:
              type: tcp
            startup:
              type: tcp
          env:
            FF_SYNCSERVER_PUBLIC_URL: "firefox-syncserver.192.168.1.189.nip.io"
            FF_SYNCSERVER_FORCE_WSGI_ENVIRON: true
            FF_SYNCSERVER_ACCESSLOG: false
            FF_SYNCSERVER_LOGLEVEL: "info"
            FF_SYNCSERVER_ALLOW_NEW_USERS: true
            FF_SYNCSERVER_FORWARDED_ALLOW_IPS: "*"
            FF_SYNCSERVER_SQLURI:
              secretKeyRef:
                name: cnpg-main-urls
                key: std
            FF_SYNCSERVER_SECRET: "changeme"

service:
  main:
    ports:
      main:
        port: 10051
        targetPort: 5000

persistence:
  config:
    enabled: true
    mountPath: "/config"

# Enabled postgres
cnpg:
  main:
    enabled: true
    user: firefox-syncserver
    database: firefox-syncserver

portal:
  open:
    enabled: true