# Default values for homelab-operator.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

image:
  repository: ghcr.io/morten-olsen/homelab-operator
  pullPolicy: Always
  # Overrides the image tag whose default is the chart appVersion.
  tag: main

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

nodeSelector: {}

tolerations: []

affinity: {}

# Configuration for the homelab operator
config:
  # PostgreSQL database configuration
  postgres:
    host:
      # Direct value (used when fromSecret.enabled is false)
      value: "127.0.0.1"
      # Secret reference (used when fromSecret.enabled is true)
      fromSecret:
        enabled: false
        secretName: ""
        key: "POSTGRES_HOST"
    
    port:
      value: "5432"
      fromSecret:
        enabled: false
        secretName: ""
        key: "POSTGRES_PORT"
    
    user:
      value: "postgres"
      fromSecret:
        enabled: false
        secretName: ""
        key: "POSTGRES_USER"
    
    password:
      value: ""
      fromSecret:
        enabled: true  # Default to secret for sensitive data
        secretName: "postgres-secret"
        key: "POSTGRES_PASSWORD"
  
  # Certificate manager configuration
  certManager:
    value: "letsencrypt-prod"
    fromSecret:
      enabled: false
      secretName: ""
      key: "CERT_MANAGER"
  
  # Istio gateway configuration
  istioGateway:
    value: "istio-ingress"
    fromSecret:
      enabled: false
      secretName: ""
      key: "ISTIO_GATEWAY"