---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: unifi
  namespace: networking
spec:
  interval: 5m
  chart:
    spec:
      # renovate: registryUrl=https://k8s-at-home.com/charts/
      chart: unifi
      version: 4.2.3
      sourceRef:
        kind: HelmRepository
        name: k8s-at-home-charts
        namespace: flux-system
      interval: 5m
  values:
    image:
      repository: jacobalberty/unifi
      tag: v6.2.26
      pullPolicy: IfNotPresent

    env:
      TZ: "Europe/Paris"

    service:
      main:
        annotations:
          coredns.io/hostname: unifi
          traefik.ingress.kubernetes.io/service.serversscheme: https
        type: LoadBalancer
        externalIPs:
          - ${CLUSTER_LB_UNIFI}
        externalTrafficPolicy: Local

    ingress:
      main:
        enabled: true
        ingressClassName: "nginx"
        # annotations:
          # traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
          # traefik.ingress.kubernetes.io/router.middlewares: networking-buffering-medium@kubernetescrd
        hosts:
          - host: "unifi.${SECRET_CLUSTER_DOMAIN}"
            paths:
              - path: /
        tls:
          - hosts:
              - "unifi.${SECRET_CLUSTER_DOMAIN}"

    persistence:
      data:
        enabled: true
        existingClaim: unifi-config

    resources:
      requests:
        memory: 2Gi
        cpu: 100m