# minio tenant
tenant:
  tenant:
    name: s3-cusprod-prodwork01
    configuration:
      name: minio-config
    pools:
      - servers: 2
        volumesPerServer: 2
        storageClassName: hcloud-volumes
        size: 10Gi
        resources:
          limits:
            cpu: "0.3"
            memory: 400Mi
    buckets:
      - name: mysql
        region: ""
      - name: postgres
        region: ""
      - name: wordpress
        region: ""
    users:
      - name: user1
      - name: user2
      - name: wpbackup
    prometheus:
      diskCapacityGB: false
    log:
      audit:
        diskCapacityGB: false
  ingress:
    api:
      enabled: true
      ingressClassName: nginx
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod
        cert-manager.io/issue-temporary-certificate: "true"
        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
        nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
        nginx.ingress.kubernetes.io/proxy-body-size: 32m
      host: s3storage-cusprod-prodwork01.smardigo.digital
      tls:
        - secretName: s3-miniotest-cert
          hosts:
            - s3storage-cusprod-prodwork01.smardigo.digital
    console:
      enabled: true
      ingressClassName: nginx
      annotations:
        cert-manager.io/cluster-issuer: letsencrypt-prod
        cert-manager.io/issue-temporary-certificate: "true"
        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
        nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
      host: s3console-cusprod-prodwork01.smardigo.digital
      tls:
        - secretName: s3-console-cert
          hosts:
            - s3console-cusprod-prodwork01.smardigo.digital

smardigo-connect:
  connect:
    domain: connect-cusprod-prodwork01.smardigo.digital
    oidc:
      client_id: cusprod-connect
      registration_id: cusprod-connect
      issuer_host: prodwork01-keycloak-01-keycloak.smardigo.digital
      realm: mobene
    iam:
      iam_module: external
      iam_client_enabled: "true"
      protocol: http
      hostname: iam.mobene-keycloak
      port: 8080

smardigo-worker:
  uba:
    enabled: true
  sepa:
    enabled: true
  ocr:
    enabled: true

smardigo-wordpress:
  wordpress:
    multisite:
      host: connect-wordpress-cusprod-prodwork01.smardigo.digital
    extraEnvVars:
      - name: WORDPRESS_DEBUG
        value: "1"
      - name: AUTH_API 
        value: "https://prodwork01-keycloak-01-keycloak.smardigo.digital"
      - name: RESOURCE_API
        value: "https://connect-cusprod-prodwork01.smardigo.digital"
      - name: REALM_ID
        value: "mobene"
      - name: REGISTRATION_ID
        value: "cusprod-connect"
      - name: CLIENT_ID
        value: "cusprod-connect"
      - name: SK_NRW_ISSUER
        value: "https://prodwork01-keycloak-01-keycloak.smardigo.digital/auth/realms/mobene"
      - name: SK_NRW_PROVIDER_URL
        value: "https://prodwork01-keycloak-01-keycloak.smardigo.digital/auth/realms/mobene"
    customPostInitScripts:
      install-plugins.sh: |
        #!/bin/bash
        wp plugin install https://updraftplus.com/wp-content/uploads/updraftplus.zip --activate-network
    ingress:
      hostname: connect-wordpress-cusprod-prodwork01.smardigo.digital
      extraHosts:
        - name: "*.connect-wordpress-cusprod-prodwork01.smardigo.digital"
          path: /
      extraTls:
      - hosts:
          - "*.connect-wordpress-cusprod-prodwork01.smardigo.digital"
        secretName: "connect-wordpress-cusprod-prodwork01.smardigo.digital-wildcard-tls"