---
k8s_gitea_helm__release_values:
  gitea:
    admin:
      username: gitea_admin
      password: '{{ k8s_gitea_helm__gitea_admin_password_vault }}'
      email: '{{ devops_email_address }}' 
    metrics:
      enabled: true
      serviceMonitor:
        enabled: true
    config:
      cache:
        ENABLED: false
    startupProbe:
      tcpSocket:
        port: http
      initialDelaySeconds: 30
      timeoutSeconds: 1
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 10
  memcached:
    enabled: false
  ingress:
    enabled: true
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt-prod
      cert-manager.io/issue-temporary-certificate: "true"
      kubernetes.io/ingress.class: nginx
      nginx.ingress.kubernetes.io/ssl-redirect: "false"
      nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}"
    hosts:
      - host: "{{ stage }}-gitea.{{ domain }}"
        paths:
        - path: '/'
          pathType: Prefix
    tls:
      - secretName: "{{ stage }}-gitea-cert"
        hosts:
          - "{{ stage }}-gitea.{{ domain }}"
  persistence:
    enabled: true
    storageClass: hcloud-volumes
  postgresql:
    global:
      postgresql:
        postgresqlUsername: gitti
        postgresqlPassword: '{{ k8s_gitea_helm__postgresql_global_postgresql_postgresqlPassword_vault }}'