image:
  repository: tccr.io/truecharts/penpot-frontend
  pullPolicy: IfNotPresent
  tag: 1.17.2@sha256:72cb9d9b300e31118aff57bd7f70fff729bd2555044f249f63ad640479ce29d1

backendImage:
  repository: tccr.io/truecharts/penpot-backend
  pullPolicy: IfNotPresent
  tag: 1.17.2@sha256:aada2cf1de4b7ff4b3f69ada656532af3ce70c63b830a7f53a4f4a374df5ebaa

exporterImage:
  repository: tccr.io/truecharts/penpot-exporter
  pullPolicy: IfNotPresent
  tag: 1.17.2@sha256:3ec7468d4f30f40c843f4192ada074a947fbc1b7fabe8f1d43e6afd7735c42b9

securityContext:
  runAsNonRoot: false
  readOnlyRootFilesystem: false

podSecurityContext:
  runAsUser: 0
  runAsGroup: 0

hostAliases:
  - ip: 127.0.0.1
    hostnames:
      - penpot-backend
      - penpot-exporter
      - penpot-frontend

penpot:
  public_uri: "http://localhost:{{ .Values.service.main.ports.main.port }}"
  flags:
    registration: true
    insecure_register: false
    login: true
    demo_users: false
    demo_warning: false
    user_feedback: false
    mail_verification: true
    log_invitation_token: false
    log_emails: false
    secure_session_cookies: true
    cors: false
    backend_api_doc: false
  telemetry_enabled: false
  registration_domain_whitelist: []
  smtp:
    enabled: false
    default_from: "no-reply@example.com"
    default_reply_to: "no-reply@example.com"
    tls: true
    ssl: false
    host: ""
    port: 587
    user: ""
    pass: ""
  identity_providers:
    google:
      enabled: false
      client_id: ""
      client_secret: ""
    github:
      enabled: false
      client_id: ""
      client_secret: ""
    gitlab:
      enabled: false
      base_uri: ""
      client_id: ""
      client_secret: ""
    oidc:
      enabled: false
      base_uri: ""
      client_id: ""
      client_secret: ""
    ldap:
      enabled: false
      host: ""
      port: 10389
      ssl: false
      starttls: false
      base_dn: ""
      bind_dn: ""
      bind_pass: ""
      attrs_username: ""
      attrs_email: ""
      attrs_fullname: ""

envFrom:
  - secretRef:
      name: '{{ include "tc.common.names.fullname" . }}-common-secret'
  - secretRef:
      name: '{{ include "tc.common.names.fullname" . }}-frontend-secret'

probes:
  liveness:
    type: HTTP
    path: /
  readiness:
    type: HTTP
    path: /
  startup:
    type: HTTP
    path: /

service:
  main:
    ports:
      main:
        protocol: HTTP
        targetPort: 80
        port: 10592

persistence:
  data:
    enabled: true
    mountPath: /opt/data
    noMount: true
  assets:
    enabled: true
    mountPath: /opt/data/assets

postgresql:
  enabled: true
  existingSecret: dbcreds
  postgresqlDatabase: penpot
  postgresqlUsername: penpot

redis:
  enabled: true
  existingSecret: rediscreds
  redisUsername: penpot

portal:
  enabled: true