# Include{groups}
portals: {}
questions:
# Include{global}
# Include{credentials}
# Include{workload}
# Include{workloadDeployment}
# Include{replicas1}
# Include{podSpec}
# Include{containerMain}
# Include{containerBasic}
# Include{containerAdvanced}
  - variable: tailscale
    group: App Configuration
    label: Tailscale Configuration
    schema:
      additional_attrs: true
      type: dict
      attrs:
        - variable: authkey
          label: Auth Key
          description: Provide an auth key to automatically authenticate the node as your user account.
          schema:
            type: string
            private: true
            default: ""
        - variable: auth_once
          label: Auth Once
          description: Only attempt to log in if not already logged in.
          schema:
            type: boolean
            default: true
        - variable: userspace
          label: Userspace
          description: Userspace Networking mode allows running Tailscale where you don't have access to create a VPN tunnel device. *Required for Exit Node/Accessing Local Routes* See <a href="https://truecharts.org/charts/stable/tailscale/How-To-Guide">How-To-Guide</a> for more info
          schema:
            type: boolean
            default: true
        - variable: accept_dns
          label: Accept DNS
          description: Accept DNS configuration from the admin console.
          schema:
            type: boolean
            default: false
        - variable: routes
          label: Routes
          description: Expose physical subnet routes to your entire Tailscale network.
          schema:
            type: string
            default: ""
        - variable: dest_ip
          label: Dest IP
          description: Tells the DNAT mechanism which Destination IP to set in the IP header, and where to send packets that are matched.
          schema:
            type: string
            default: ""
        - variable: sock5_server
          label: Sock5 Server
          description: The address on which to listen for SOCKS5 proxying into the tailscale net.
          schema:
            type: string
            default: ""
        - variable: outbound_http_proxy_listen
          label: Outbound HTTP Proxy Listen
          description: The address on which to listen for HTTP proxying into the tailscale net.
          schema:
            type: string
            default: ""
        - variable: hostname
          label: Hostname
          description: You can specify a specific hostname for use inside Tailscale. (Passes --hostname HOSTNAME to extra_args)
          schema:
            type: string
            default: ""
        - variable: advertise_as_exit_node
          label: Advertise as exit node
          description: This is used to pass traffic through tailscale like a private VPN. (Passes --advertise-exit-node to extra_args)
          schema:
            type: boolean
            default: false
        - variable: extra_args
          label: Extra Args
          description: UP_ARGS or flags to pass along to Tailscale, such as --advertise-exit-node
          schema:
            type: string
            default: ""
        - variable: daemon_extra_args
          label: Tailscale Daemon Extra Args
          schema:
            type: string
            default: ""
# Include{containerConfig}
# Include{podOptions}
# Include{externalInterfaces}

# Include{serviceList}
# Include{persistenceList}
# Include{ingressRoot}
        - variable: main
          label: Main Ingress
          schema:
            additional_attrs: true
            type: dict
            attrs:
# Include{ingressDefault}
# Include{ingressAdvanced}
# Include{ingressList}
# Include{securityContextRoot}
              - variable: runAsUser
                label: "runAsUser"
                description: "The UserID of the user running the application"
                schema:
                  type: int
                  default: 0
              - variable: runAsGroup
                label: "runAsGroup"
                description: "The groupID this App of the user running the application"
                schema:
                  type: int
                  default: 0
# Include{securityContextContainer}
# Include{securityContextAdvanced}
# Include{securityContextPod}
              - variable: fsGroup
                label: "fsGroup"
                description: "The group that should own ALL storage."
                schema:
                  type: int
                  default: 568
# Include{resources}
# Include{advanced}
# Include{addons}
# Include{codeserver}
# Include{netshoot}
# Include{vpn}
# Include{documentation}