---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: drone
  namespace: development
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://charts.drone.io
      chart: drone
      version: 0.1.7
      sourceRef:
        kind: HelmRepository
        name: drone-charts
        namespace: flux-system
      interval: 5m
  values:
    image:
      repository: drone/drone
      tag: 2.5.0

    env:
      DRONE_DATABASE_DRIVER: postgres
      DRONE_DATABASE_DATASOURCE: ${SECRET_DRONE_DATABASE_DATASOURCE}
      DRONE_DATABASE_SECRET: ${SECRET_DRONE_DATABASE_SECRET}
      DRONE_RPC_SECRET: ${SECRET_DRONE_RPC_SECRET}
      DRONE_GITEA_CLIENT_ID: ${SECRET_DRONE_GITEA_CLIENT_ID}
      DRONE_GITEA_CLIENT_SECRET: ${SECRET_DRONE_GITEA_CLIENT_SECRET}
      DRONE_GITEA_SERVER: https://gitea.${SECRET_CLUSTER_DOMAIN}
      DRONE_GIT_ALWAYS_AUTH: true
      DRONE_LOGS_TEXT: true
      DRONE_LOGS_PRETTY: true
      DRONE_LOGS_COLOR: true
      DRONE_SERVER_PROTO: https
      DRONE_SERVER_HOST: drone.${SECRET_CLUSTER_DOMAIN}

    updateStrategy:
      type: Recreate

    persistentVolume:
      enabled: false

    ingress:
      enabled: true
      # annotations:
        # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
      hosts:
        - host: "drone.${SECRET_CLUSTER_DOMAIN}"
          paths: ["/"]
      tls:
        - hosts:
            - "wallabag.${SECRET_CLUSTER_DOMAIN}"
          secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"
  postRenderers:
    - kustomize:
        patchesJson6902:
          - target:
              kind: Ingress
              name: drone
            patch:
              - op: add
                path: /spec/ingressClassName
                value: traefik