image:
  repository: tccr.io/truecharts/penpot-frontend
  pullPolicy: IfNotPresent
  tag: 1.18.1@sha256:a22b404ec3e66d9cabccfa8f0a5e2b0ffd9f024bb543767fa20c44a0b56b5da2

backendImage:
  repository: tccr.io/truecharts/penpot-backend
  pullPolicy: IfNotPresent
  tag: 1.18.1@sha256:4deccec7a0d3e9e302709f0a5914cdd606bcebcccaf059551d49ace254f95dc0

exporterImage:
  repository: tccr.io/truecharts/penpot-exporter
  pullPolicy: IfNotPresent
  tag: 1.18.1@sha256:ccc94aa8c97503f85af11fa55e108d62a5f5c50f8cbe585ac028a70241cabe0d

securityContext:
  runAsNonRoot: false
  readOnlyRootFilesystem: false

podSecurityContext:
  runAsUser: 0
  runAsGroup: 0

hostAliases:
  - ip: 127.0.0.1
    hostnames:
      - penpot-backend
      - penpot-exporter
      - penpot-frontend

penpot:
  public_uri: "http://localhost:{{ .Values.service.main.ports.main.port }}"
  flags:
    registration: true
    insecure_register: false
    login: true
    demo_users: false
    demo_warning: false
    user_feedback: false
    mail_verification: true
    log_invitation_token: false
    log_emails: false
    secure_session_cookies: true
    cors: false
    backend_api_doc: false
  telemetry_enabled: false
  registration_domain_whitelist: []
  smtp:
    enabled: false
    default_from: "no-reply@example.com"
    default_reply_to: "no-reply@example.com"
    tls: true
    ssl: false
    host: ""
    port: 587
    user: ""
    pass: ""
  identity_providers:
    google:
      enabled: false
      client_id: ""
      client_secret: ""
    github:
      enabled: false
      client_id: ""
      client_secret: ""
    gitlab:
      enabled: false
      base_uri: ""
      client_id: ""
      client_secret: ""
    oidc:
      enabled: false
      base_uri: ""
      client_id: ""
      client_secret: ""
    ldap:
      enabled: false
      host: ""
      port: 10389
      ssl: false
      starttls: false
      base_dn: ""
      bind_dn: ""
      bind_pass: ""
      attrs_username: ""
      attrs_email: ""
      attrs_fullname: ""

envFrom:
  - secretRef:
      name: '{{ include "tc.common.names.fullname" . }}-common-secret'
  - secretRef:
      name: '{{ include "tc.common.names.fullname" . }}-frontend-secret'

probes:
  liveness:
    type: HTTP
    path: /
  readiness:
    type: HTTP
    path: /
  startup:
    type: HTTP
    path: /

service:
  main:
    ports:
      main:
        protocol: HTTP
        targetPort: 80
        port: 10592

persistence:
  data:
    enabled: true
    mountPath: /opt/data
    noMount: true
  assets:
    enabled: true
    mountPath: /opt/data/assets

postgresql:
  enabled: true
  existingSecret: dbcreds
  postgresqlDatabase: penpot
  postgresqlUsername: penpot

redis:
  enabled: true
  existingSecret: rediscreds
  redisUsername: penpot

portal:
  enabled: true