---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: gitea
  namespace: development
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://dl.gitea.io/charts
      chart: gitea
      version: 2.2.4
      sourceRef:
        kind: HelmRepository
        name: gitea-charts
        namespace: flux-system
      interval: 5m
  values:
    persistence:
      enabled: true
      size: 10Gi
      existingClaim: "gitea-config"
    ingress:
      enabled: true
      annotations:
        kubernetes.io/ingress.class: "nginx"
        nginx.ingress.kubernetes.io/proxy-body-size: 128m
        prometheus.io/probe: "true"
      hosts:
        - "gitea.${SECRET_CLUSTER_DOMAIN}"
      tls:
        - hosts:
            - "gitea.${SECRET_CLUSTER_DOMAIN}"
    service:
      http:
        port: 3000
      ssh:
        annotations:
          prometheus.io/probe: "true"
          prometheus.io/protocol: tcp
        type: LoadBalancer
        port: 22
        externalTrafficPolicy: Local
        externalIPs:
          - ${CLUSTER_LB_GITEA}
    gitea:
      admin:
        email: ${SECRET_GITEA_ADMIN_EMAIL}
        username: auricom
        password: ${SECRET_GITEA_ADMIN_PASSWORD}
      config:
        APP_NAME: "Homelab Gitea"
        database:
          DB_TYPE: postgres
          HOST: postgresql:5432
          NAME: gitea
          USER: gitea
          PASSWD: ${SECRET_GITEA_DB_PASSWORD}
          SCHEMA: gitea
        server:
          SSH_PORT: 22
          SSH_LISTEN_PORT: 22
        respository:
          DEFAULT_PRIVATE: true
        admin:
          DISABLE_REGULAR_ORG_CREATION: true
        security:
          PASSWORD_COMPLEXITY: "lower,upper"
          MIN_PASSWORD_LENGTH: 12
        service:
          DISABLE_REGISTRATION: true
          REQUIRE_SIGNIN_VIEW: true
      database:
        builtIn:
          postgresql:
            enabled: false
        postgresql:
      cache:
        builtIn:
          enabled: true
    memcached:
      image:
        repository: bitnami/memcached
        tag: 1.6.9
      service:
        port: 11211