---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helm.toolkit.fluxcd.io/helmrelease_v2beta1.json
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: &app wallabag
  namespace: default
spec:
  interval: 30m
  chart:
    spec:
      chart: app-template
      version: 1.5.1
      sourceRef:
        kind: HelmRepository
        name: bjw-s
        namespace: flux-system
  maxHistory: 2
  install:
    createNamespace: true
    remediation:
      retries: 3
  upgrade:
    cleanupOnFail: true
    remediation:
      retries: 3
  uninstall:
    keepHistory: false
  values:
    controller:
      annotations:
        reloader.stakater.com/auto: "true"
    initContainers:
      01-init-db:
        image: ghcr.io/auricom/postgres-init:15.3
        imagePullPolicy: IfNotPresent
        envFrom: &envFrom
          - secretRef:
              name: wallabag-secret
      02-init-migrate:
        image: wallabag/wallabag:2.6.2
        envFrom: *envFrom
        env: &env
          SYMFONY__ENV__DATABASE_DRIVER: pdo_pgsql
          SYMFONY__ENV__REDIS_HOST: redis-master.default.svc.cluster.local.
          SYMFONY__ENV__DOMAIN_NAME: https://wallabag.${SECRET_CLUSTER_DOMAIN}
          SYMFONY__ENV__SERVER_NAME: Wallabag
          SYMFONY__ENV__FOSUSER_REGISTRATION: "false"
          SYMFONY__ENV__FOSUSER_CONFIRMATION: "false"
          POPULATE_DATABASE: "false"
        command:
          - /var/www/wallabag/bin/console
          - doctrine:migrations:migrate
          - --env=prod
          - --no-interaction
    image:
      repository: wallabag/wallabag
      tag: 2.6.2
    envFrom: *envFrom
    env: *env
    enableServiceLinks: false
    service:
      main:
        ports:
          http:
            port: 80
    ingress:
      main:
        enabled: true
        ingressClassName: "nginx"
        annotations:
          external-dns.home.arpa/enabled: "true"
          hajimari.io/icon: mdi:newspaper-variant
        hosts:
          - host: &host "{{ .Release.Name }}.${SECRET_CLUSTER_DOMAIN}"
            paths:
              - path: /
                pathType: Prefix
        tls:
          - hosts:
              - *host
    securityContext:
      runAsUser: 0
    persistence:
      images:
        enabled: true
        existingClaim: wallabag-images
    resources:
      requests:
        cpu: 100m
        memory: 250Mi
      limits:
        memory: 512Mi