---

apiVersion: v1
kind: Secret
metadata:
  name: gitea-admin-secret
  namespace: ops
type: Opaque
stringData:
  username: ntr
  password: "ghastly ghouls"
  email: "ntr@strix.systems"

---

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: gitea-data
  namespace: ops
spec:
  storageClassName: fast
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 20Gi

---

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: gitea-redis
  namespace: ops
spec:
  storageClassName: fast
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 4Gi

---

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: gitea-pg
  namespace: ops
spec:
  storageClassName: fast
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 4Gi

---

apiVersion: helm.cattle.io/v1
kind: HelmChart
metadata:
  name: gitea
  namespace: ops
spec:
  repo: https://dl.gitea.com/charts/
  chart: gitea
  targetNamespace: ops
  valuesContent: |-

    ingress:
      enabled: true
      className: haproxy
      annotations:
        cert-manager.io/cluster-issuer: "letsencrypt-prod"
      tls:
      - secretName: git-tls
        hosts:
        - git.ntwl.xyz
        # - git.strix.systems
      hosts:
        - host: git.ntwl.xyz
          paths:
            - path: /
              pathType: Prefix
        - host: git.strix.systems
          paths:
            - path: /
              pathType: Prefix

    service:
      ssh:
        type: LoadBalancer
        port: 60022
        externalTrafficPolicy: Local

    redis-cluster:
      enabled: false

    redis:
      enabled: true
      persistence:
        enabled: true
        existingClaim: gitea-redis

    postgresql:
      enabled: true
      persistence:
        enabled: true
        existingClaim: gitea-pg

    postgresql-ha:
      enabled: false

    persistence:
      enabled: true
      existingClaim: gitea-data

    gitea:
      config:
        database:
          DB_TYPE: postgres
        indexer:
          ISSUE_INDEXER_TYPE: bleve
          REPO_INDEXER_ENABLED: true
        server:
          SSH_PORT: 60022
      admin:
        existingSecret: gitea-admin-secret