---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: unifi
  namespace: networking
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://k8s-at-home.com/charts/
      chart: unifi
      version: 5.0.0
      sourceRef:
        kind: HelmRepository
        name: k8s-at-home-charts
        namespace: flux-system
      interval: 5m
  values:
    image:
      repository: jacobalberty/unifi
      tag: v7.1.66
      pullPolicy: IfNotPresent

    env:
      TZ: "${TIMEZONE}"

    service:
      main:
        type: LoadBalancer
        externalTrafficPolicy: Local
        externalIPs:
          - ${CLUSTER_LB_UNIFI}
        ports:
          stun:
            enabled: false
          syslog:
            enabled: false
          discovery:
            enabled: false
      udp:
        enabled: true
        type: LoadBalancer
        externalTrafficPolicy: Local
        externalIPs:
          - ${CLUSTER_LB_UNIFI}
        ports:
          stun:
            enabled: true
            port: 3478
            protocol: UDP
          syslog:
            enabled: false
            port: 5514
            protocol: UDP
          discovery:
            enabled: true
            port: 10001
            protocol: UDP

    ingress:
      main:
        enabled: true
        ingressClassName: "nginx"
        hosts:
          - host: "unifi.${SECRET_CLUSTER_DOMAIN}"
            paths:
              - path: /
        tls:
          - hosts:
              - "unifi.${SECRET_CLUSTER_DOMAIN}"

    persistence:
      data:
        enabled: true
        existingClaim: unifi-config

    resources:
      requests:
        memory: 2Gi
        cpu: 100m