---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: recipes
  namespace: data
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://k8s-at-home.com/charts/
      chart: recipes
      version: 6.1.0
      sourceRef:
        kind: HelmRepository
        name: k8s-at-home-charts
        namespace: flux-system
      interval: 5m
  values:
    image:
      repository: vabene1111/recipes
      tag: 1.0.3
      pullPolicy: IfNotPresent

    env:
      SECRET_KEY: ${SECRET_RECIPES_SECRET_KEY}
      DEBUG: "0"
      ALLOWED_HOSTS: "*"
      DB_ENGINE: django.db.backends.postgresql
      POSTGRES_HOST: postgresql-kube.data.svc.cluster.local.
      POSTGRES_PORT: 5432
      POSTGRES_DB: recipes
      POSTGRES_USER: recipes
      POSTGRES_PASSWORD: ${SECRET_RECIPES_DB_PASSWORD}
      GUNICORN_MEDIA: "0"
      TIMEZONE: Europe/Paris
      FRACTION_PREF_DEFAULT: "0"
      COMMENT_PREF_DEFAULT: "1"
      SHOPPING_MIN_AUTOSYNC_INTERVAL: "5"

    sidecar:
      image:
        repository: nginx
        tag: 1.21.4
        pullPolicy: IfNotPresent

    persistence:
      media:
        enabled: true
        existingClaim: recipes-files
        mountPath: /opt/recipes/mediafiles
      static:
        enabled: true
        type: emptyDir

    service:
      main:
        annotations:
          prometheus.io/probe: "true"
          prometheus.io/protocol: http

    ingress:
      main:
        enabled: true
        ingressClassName: "nginx"
        # annotations:
          # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
          # traefik.ingress.kubernetes.io/router.middlewares: networking-buffering-small@kubernetescrd
        hosts:
          - host: "recipes.${SECRET_CLUSTER_DOMAIN}"
            paths:
              - path: /
                pathType: Prefix
        tls:
          - hosts:
              - "recipes.${SECRET_CLUSTER_DOMAIN}"
            secretName: "${SECRET_CLUSTER_CERTIFICATE_DEFAULT}"