# minio tenant
tenant:
  tenant:
    name: s3-nsodev-prodwork01
    configuration:
      name: minio-config
    pools:
      - servers: 2
        volumesPerServer: 2
        storageClassName: hcloud-volumes
        size: 10Gi
        resources:
          limits:
            cpu: "0.3"
            memory: 400Mi
    buckets:
      - name: mysql
        region: ""
      - name: postgres
        region: ""
    users:
      - name: user1
      - name: user2
    prometheus:
      diskCapacityGB: false
    log:
      audit:
        diskCapacityGB: false
  ingress:
    api:
      enabled: true
      ingressClassName: nginx
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod
        cert-manager.io/issue-temporary-certificate: "true"
        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
        nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
        nginx.ingress.kubernetes.io/proxy-body-size: 32m
      host: s3storage-nsodev-prodwork01.smardigo.digital
      tls:
        - secretName: s3-miniotest-cert
          hosts:
            - s3storage-nsodev-prodwork01.smardigo.digital
    console:
      enabled: true
      ingressClassName: nginx
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod
        cert-manager.io/issue-temporary-certificate: "true"
        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
        nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      host: s3console-nsodev-prodwork01.smardigo.digital
      tls:
        - secretName: s3-console-cert
          hosts:
            - s3console-nsodev-prodwork01.smardigo.digital

smardigo-connect:
  connect:
    domain: connect-nsodev-prodwork01.smardigo.digital
    oidc:
      client_id: nsodev-connect
      registration_id: nsodev-connect
      issuer_host: prodwork01-keycloak-01-keycloak.smardigo.digital
      realm: mobene
    iam:
      iam_module: external
      iam_client_enabled: "true"
      protocol: http
      hostname: iam.mobene-keycloak
      port: 8080

smardigo-worker:
  uba:
    enabled: true
  sepa:
    enabled: true
  ocr:
    enabled: true

wordpress:
  wordpressEmail: nso.devops@netgo.de
  wordpressScheme: https
  global:
    storageClass: hcloud-volumes
  livenessProbe:
    httpGet:
      port: https
      scheme: HTTPS
  readinessProbe:
    httpGet:
      port: https
      scheme: HTTPS
  service:
    type: ClusterIP
  networkPolicy:
    enabled: true
    ingress:
      enabled: true
      namespaceSelector:
        kubernetes.io/metadata.name: ingress
      podSelector:
        app.kubernetes.io/name: ingress-nginx
    egressRules:
      denyConnectionsToExternal: false
      customRules:
        - to: []          
  multisite:
    enable: true
    host: connect-wordpress-nsodev-prodwork01.smardigo.digital
    networkType: subdomain
    enableNipIoRedirect: false
  extraEnvVars:
    - name: WORDPRESS_DEBUG
      value: "1"
    - name: AUTH_API 
      value: "https://prodwork01-keycloak-01-keycloak.smardigo.digital"
    - name: RESOURCE_API
      value: "https://connect-nsodev-prodwork01.smardigo.digital"
    - name: REALM_ID
      value: "mobene"
    - name: REGISTRATION_ID
      value: "nsodev-connect"
    - name: CLIENT_ID
      value: "nsodev-connect"
    - name: SK_NRW_ISSUER
      value: "https://prodwork01-keycloak-01-keycloak.smardigo.digital/auth/realms/mobene"
    - name: SK_NRW_PROVIDER_URL
      value: "https://prodwork01-keycloak-01-keycloak.smardigo.digital/auth/realms/mobene"
  ingress:
    enabled: true
    ingressClassName: nginx
    certManager: true
    hostname: connect-wordpress-nsodev-prodwork01.smardigo.digital
    path: /
    pathType: Prefix
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt-prod
      cert-manager.io/issue-temporary-certificate: "true"
      nginx.ingress.kubernetes.io/backend-protocol: HTTP
      nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      nginx.ingress.kubernetes.io/proxy-body-size: 32m
    tls: true