From c4fe4ffefb690f13e80c77d0d9a7985f000fd983 Mon Sep 17 00:00:00 2001
From: Morten Olsen <fbtijfdq@void.black>
Date: Sun, 21 Dec 2025 19:48:34 +0100
Subject: [PATCH] add woodpecker

---
 .../woodpecker-external-http-service.yaml     | 12 +++++
 .../forgejo/templates/woodpecker-secrets.yaml |  9 ++++
 apps/charts/forgejo/templates/woodpecker.yaml | 53 +++++++++++++++++++
 apps/charts/forgejo/values.yaml               |  2 +
 4 files changed, 76 insertions(+)
 create mode 100644 apps/charts/forgejo/templates/woodpecker-external-http-service.yaml
 create mode 100644 apps/charts/forgejo/templates/woodpecker-secrets.yaml
 create mode 100644 apps/charts/forgejo/templates/woodpecker.yaml

diff --git a/apps/charts/forgejo/templates/woodpecker-external-http-service.yaml b/apps/charts/forgejo/templates/woodpecker-external-http-service.yaml
new file mode 100644
index 0000000..f79dd47
--- /dev/null
+++ b/apps/charts/forgejo/templates/woodpecker-external-http-service.yaml
@@ -0,0 +1,12 @@
+apiVersion: homelab.mortenolsen.pro/v1
+kind: ExternalHttpService
+metadata:
+  name: "{{ .Release.Name }}-woodpecker"
+
+spec:
+  environment: '{{ .Values.globals.environment }}'
+  subdomain: 'woodpecker'
+  destination:
+    host: 'woodpecker-server.{{ .Release.Namespace }}.svc.cluster.local'
+    port:
+      number: 80
diff --git a/apps/charts/forgejo/templates/woodpecker-secrets.yaml b/apps/charts/forgejo/templates/woodpecker-secrets.yaml
new file mode 100644
index 0000000..391f70e
--- /dev/null
+++ b/apps/charts/forgejo/templates/woodpecker-secrets.yaml
@@ -0,0 +1,9 @@
+apiVersion: homelab.mortenolsen.pro/v1
+kind: GenerateSecret
+metadata:
+  name: "{{ .Release.Name }}-woodpecker-secret"
+spec:
+  fields:
+    - name: WOODPECKER_AGENT_SECRET
+      encoding: hex
+      length: 64
diff --git a/apps/charts/forgejo/templates/woodpecker.yaml b/apps/charts/forgejo/templates/woodpecker.yaml
new file mode 100644
index 0000000..33b30bb
--- /dev/null
+++ b/apps/charts/forgejo/templates/woodpecker.yaml
@@ -0,0 +1,53 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: "{{ .Release.Name }}-woodpecker"
+
+  namespace: argocd
+spec:
+  project: apps
+  source:
+    repoURL: https://woodpecker-ci.org/
+    chart: woodpecker
+    targetRevision: 3.4.2
+    helm:
+      releaseName: woodpecker
+      values: |
+        server:
+          extraSecretNamesForEnvFrom:
+            - {{ .Release.Name }}-woodpecker-secret
+          env:
+            WOODPECKER_HOST: "https://woodpecker.{{ .Values.globals.domain }}"
+            WOODPECKER_FORGEJO: "true"
+            WOODPECKER_FORGEJO_URL: "https://{{ .Values.subdomain }}.{{ .Values.globals.domain }}"
+            WOODPECKER_FORGEJO_CLIENT: "b3b42b15-3a60-4683-b548-b78fb3d82869"
+            WOODPECKER_FORGEJO_SECRET: "gto_xinhg5w3awf3moi64a4mqwzsbzv6mbnvb3ibyo6s7oo6d7j4n7da"
+            WOODPECKER_ADMIN: morten-olsen
+            WOODPECKER_BACKEND_K8S_STORAGE_CLASS: "{{ .Values.globals.environment }}"
+            WOODPECKER_BACKEND_K8S_STORAGE_RWX: "false"
+            WOODPECKER_PLUGINS_PRIVILEGED: plugins/docker
+          ingress:
+            enabled: false
+          persistentVolume:
+            enabled: true
+            accessModes:
+              - ReadWriteOnce
+            size: 10Gi
+            storageClass: "prod"
+        agent:
+          extraSecretNamesForEnvFrom:
+            - {{ .Release.Name }}-woodpecker-secret
+          env:
+            WOODPECKER_SERVER: "woodpecker-server:9000"
+          persistence:
+            storageClass: "{{ .Values.globals.environment }}"
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: {{ .Release.Namespace }}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true
diff --git a/apps/charts/forgejo/values.yaml b/apps/charts/forgejo/values.yaml
index f93b7ed..857496d 100644
--- a/apps/charts/forgejo/values.yaml
+++ b/apps/charts/forgejo/values.yaml
@@ -3,3 +3,5 @@ image:
   tag: 13@sha256:88858e7f592f82d4f650713c7bed8c0cd792d7f71475a7467c5650a31cd2eda9
   pullPolicy: IfNotPresent
 subdomain: code
+globals:
+  environment: prod