--- # yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/main/charts/other/app-template/schemas/helmrelease-helm-v2beta2.schema.json apiVersion: helm.toolkit.fluxcd.io/v2 kind: HelmRelease metadata: name: &app freshrss namespace: default spec: interval: 30m chart: spec: chart: app-template version: 3.2.1 sourceRef: kind: HelmRepository name: bjw-s namespace: flux-system maxHistory: 2 install: createNamespace: true remediation: retries: 3 upgrade: cleanupOnFail: true remediation: strategy: rollback retries: 3 uninstall: keepHistory: false values: controllers: freshrss: annotations: reloader.stakater.com/auto: "true" initContainers: init-db: image: repository: ghcr.io/onedr0p/postgres-init tag: 16 envFrom: &envFrom - secretRef: name: freshrss-secret containers: app: image: repository: freshrss/freshrss tag: 1.24.1@sha256:0e8708498272dac567b9d1654822ccb22037cf4b1792ec75b9929e70e53ddd16 env: TZ: ${TIMEZONE} CRON_MIN: 18,48 DOMAIN: "https://freshrss.${SECRET_EXTERNAL_DOMAIN}/" OIDC_ENABLED: 1 OIDC_PROVIDER_METADATA_URL: https://auth.${SECRET_EXTERNAL_DOMAIN}/.well-known/openid-configuration OIDC_CLIENT_ID: freshrss OIDC_REMOTE_USER_CLAIM: preferred_username OIDC_SCOPES: openid groups email profile OIDC_X_FORWARDED_HEADERS: X-Forwarded-Host X-Forwarded-Port X-Forwarded-Proto envFrom: *envFrom resources: requests: cpu: 50m memory: 256Mi service: app: controller: *app ports: http: port: 80 ingress: app: enabled: true className: nginx annotations: hajimari.io/icon: mdi:rss hosts: - host: &host "{{ .Release.Name }}.${SECRET_EXTERNAL_DOMAIN}" paths: - path: / service: identifier: app port: http tls: - hosts: - *host persistence: config: enabled: true existingClaim: *app globalMounts: - path: /var/www/FreshRSS/data