image:
  repository: ghcr.io/ctfd/ctfd
  tag: 3.7.3@sha256:90470e1fe0f93028ce6ac197b8942916ee157d4b5d33c8266c5bec7662e55ac3
  pullPolicy: IfNotPresent

service:
  main:
    ports:
      main:
        protocol: http
        targetPort: 8000
        port: 10613

workload:
  main:
    podSpec:
      containers:
        main:
          env:
            # filesystem  | s3
            UPLOAD_PROVIDER: filesystem
            # set storage locations.
            UPLOAD_FOLDER: "{{ .Values.persistence.uploads.mountPath }}"
            LOG_FOLDER: "{{ .Values.persistence.logs.mountPath }}"
            SECRET_KEY:
              secretKeyRef:
                name: ctfd-secrets
                key: SECRET_KEY
            DATABASE_PORT: 3306
            DATABASE_NAME: "{{ .Values.mariadb.mariadbDatabase }}"
            DATABASE_USER: "{{ .Values.mariadb.mariadbUsername }}"
            DATABASE_HOST:
              secretKeyRef:
                expandObjectName: false
                name: '{{ printf "%s-%s" .Release.Name "mariadbcreds" }}'
                key: plainhost
            DATABASE_PASSWORD: "{{ .Values.mariadb.password }}"
            REDIS_URL:
              secretKeyRef:
                expandObjectName: false
                name: '{{ printf "%s-%s" .Release.Name "rediscreds" }}'
                key: url
            MAIL_USEAUTH: false
            MAILFROM_ADDR: ""
            MAIL_SERVER: ""
            MAIL_PORT: 587
            MAIL_USERNAME: ""
            MAIL_PASSWORD: ""
            MAIL_TLS: false
            MAIL_SSL: false
            # CTFd will not load any plugins which may alleviate issues preventing CTFd from starting, default is false.
            SAFE_MODE: true
            REVERSE_PROXY: false
            # majorleaguecyber
            OAUTH_CLIENT_ID: ""
            OAUTH_CLIENT_SECRET: ""

mariadb:
  enabled: true
  includeCommon: true
  mariadbUsername: ctfd
  mariadbDatabase: ctfd

redis:
  enabled: true
  includeCommon: true
  redisUsername: default

persistence:
  uploads:
    enabled: true
    mountPath: "/uploads"
  logs:
    enabled: true
    mountPath: "/logs"

portal:
  open:
    enabled: true