image:
  repository: tccr.io/truecharts/recipes
  tag: 1.4.5@sha256:7634b442c7af2b85c00a12614bfb05ecc43e697b58dc25cc48ed077cf2e1109c
  pullPolicy: IfNotPresent

nginxImage:
  repository: tccr.io/truecharts/nginx
  tag: 1.23.3@sha256:d8e8b68e16ea90d8354569942ad65a4adc7ae9a43f4080dabcf9e4e0f88a439d

securityContext:
  readOnlyRootFilesystem: false
  runAsNonRoot: false

podSecurityContext:
  runAsUser: 0
  runAsGroup: 0

configmap:
  config:
    enabled: true
    data:
      nginx-config: |-
        events {
          worker_connections 1024;
        }
        http {
          include /etc/nginx/mime.types;
          server {
            listen 80;
            server_name _;
            client_max_body_size 16M;
            # serve media files
            location /media/ {
              alias /media/;
            }
            # serve static files
            location /static/ {
              alias /static/;
            }
            # pass requests for dynamic content to gunicorn
            location / {
              proxy_set_header Host $http_host;
              proxy_pass http://localhost:8080;
              proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
            }
          }
        }

env:
  DEBUG: 0
  ALLOWED_HOSTS: "*"
  CSRF_TRUSTED_ORIGINS: ""
  GUNICORN_MEDIA: 0
  FRACTION_PREF_DEFAULT: 0
  COMMENT_PREF_DEFAULT: 1
  SHOPPING_MIN_AUTOSYNC_INTERVAL: 5
  TIMEZONE: "{{ .Values.TZ }}"
  DB_ENGINE: "django.db.backends.postgresql"
  POSTGRES_DB: "{{ .Values.postgresql.postgresqlDatabase }}"
  POSTGRES_USER: "{{ .Values.postgresql.postgresqlUsername }}"
  POSTGRES_PORT: "5432"
  POSTGRES_PASSWORD:
    secretKeyRef:
      name: dbcreds
      key: postgresql-password
  POSTGRES_HOST:
    secretKeyRef:
      name: dbcreds
      key: plainhost
  SECRET_KEY:
    secretKeyRef:
      name: recipes-secrets
      key: SECRET_KEY

additionalContainers:
  nginx:
    name: nginx
    image: "{{ .Values.nginxImage.repository }}:{{ .Values.nginxImage.tag }}"
    ports:
      - containerPort: 80
        name: main
    volumeMounts:
      - name: recipes-config
        mountPath: "/etc/nginx/nginx.conf"
        subPath: nginx-config
        readOnly: true
      - name: media
        mountPath: "/media"
      - name: static
        mountPath: "/static"

service:
  main:
    ports:
      main:
        port: 10029
        targetPort: 80

persistence:
  media:
    enabled: true
    mountPath: "/opt/recipes/mediafiles"
  static:
    enabled: true
    type: emptyDir
    mountPath: "/opt/recipes/staticfiles"
  recipes-config:
    enabled: "true"
    mountPath: "/etc/nginx/nginx.conf"
    subPath: "nginx.conf"
    type: "custom"
    volumeSpec:
      configMap:
        name: '{{ printf "%v-config" (include "tc.common.names.fullname" .) }}'

postgresql:
  enabled: true
  existingSecret: "dbcreds"
  postgresqlUsername: recipes
  postgresqlDatabase: recipes

portal:
  enabled: true