# minio tenant
tenant:
  tenant:
    name: s3-nsodev-prodwork01
    configuration:
      name: minio-config
    pools:
      - servers: 2
        volumesPerServer: 2
        storageClassName: hcloud-volumes
        size: 10Gi
    buckets:
      - name: mysql
        region: ""
      - name: postgres
        region: ""
      - name: wordpress
        region: ""
    users:
      - name: pgbackup
      - name: wpbackup
    prometheus:
      diskCapacityGB: false
    log:
      audit:
        diskCapacityGB: false
  ingress:
    api:
      enabled: true
      ingressClassName: nginx
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod
        cert-manager.io/issue-temporary-certificate: "true"
        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
        nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
        nginx.ingress.kubernetes.io/proxy-body-size: 32m
        nginx.ingress.kubernetes.io/whitelist-source-range: >-
          10.0.0.0/16,212.121.131.106/32,149.233.6.129/32,46.245.219.98/32,164.138.195.162/32,195.201.31.227/32,167.235.150.201/32,167.235.150.198/32,167.235.150.195/32,167.235.150.133/32,167.235.150.197/32,23.88.53.161/32,195.201.113.110/32,5.75.184.216/32,195.201.127.50/32
      host: s3storage-nsodev-prodwork01.smardigo.digital
      tls:
        - secretName: s3-miniotest-cert
          hosts:
            - s3storage-nsodev-prodwork01.smardigo.digital
    console:
      enabled: true
      ingressClassName: nginx
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod
        cert-manager.io/issue-temporary-certificate: "true"
        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
        nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      host: s3console-nsodev-prodwork01.smardigo.digital
      tls:
        - secretName: s3-console-cert
          hosts:
            - s3console-nsodev-prodwork01.smardigo.digital

kibana:
  name: kibana-nsodev-prodwork01.smardigo.digital

smardigo-connect:
  connect:
    additional_labels:
      restart: 20230131-1854
    domain: connect-nsodev-prodwork01.smardigo.digital
    image:
      version: 10.4.8
    oidc:
      client_id: nsodev
      registration_id: nsodev
      issuer_host: prodnso-keycloak-01.smardigo.digital
      realm: mobene
    iam:
      iam_module: external
      iam_client_enabled: "true"
      protocol: http
      hostname: iam.mobene-keycloak
      port: 8080
    ocr:
      enabled: true
  
smardigo-worker:
  uba:
    enabled: true
  sepa:
    enabled: true
  ocr:
    enabled: true
    image:
      version: 10.4.5

smardigo-wordpress:
  wordpress:
    multisite:
      host: connect-wordpress-nsodev-prodwork01.smardigo.digital
    customPostInitScripts:
      install-plugins.sh: |
        #!/bin/bash
        wp plugin install https://updraftplus.com/wp-content/uploads/updraftplus.zip --activate-network
    ingress:
      hostname: connect-wordpress-nsodev-prodwork01.smardigo.digital
      extraHosts:
        - name: "*.connect-wordpress-nsodev-prodwork01.smardigo.digital"
          path: /
      extraTls:
      - hosts:
          - "*.connect-wordpress-nsodev-prodwork01.smardigo.digital"
        secretName: "connect-wordpress-nsodev-prodwork01.smardigo.digital-wildcard-tls"