image:
  repository: tccr.io/truecharts/pihole
  pullPolicy: IfNotPresent
  tag: v2023.05.2@sha256:e68b01362425114636a4627ac7e86402a96bc28ba44ed6f07e44cab35ec83702

pihole:
  webPassword: "somepassword"
  dnsServers:
    - "9.9.9.9"
    - "149.112.112.112"

securityContext:
  container:
    readOnlyRootFilesystem: false
    runAsNonRoot: false
    allowPrivilegeEscalation: true
    runAsUser: 0
    runAsGroup: 0
    capabilities:
      add:
        - NET_ADMIN
        - SETFCAP
        - SETPCAP
        - KILL

workload:
  main:
    podSpec:
      containers:
        main:
          envFrom:
            - configMapRef:
                name: pihole-env
          probes:
            liveness:
              type: http
              path: /admin/index.php
            readiness:
              type: http
              path: /admin/index.php
            startup:
              type: http
              path: /admin/index.php

service:
  main:
    ports:
      main:
        port: 9089
        targetPort: 80
  dns-tcp:
    enabled: true
    ports:
      dns-tcp:
        enabled: true
        port: 53
        targetPort: 53
  dns:
    enabled: true
    ports:
      dns:
        enabled: true
        protocol: udp
        port: 53
        targetPort: 53

persistence:
  config:
    enabled: true
    mountPath: "/etc/pihole"
  dnsmasq:
    enabled: true
    mountPath: "/etc/dnsmasq.d"

portal:
  open:
    enabled: true