global:
  fullnameOverride: giteatfm
defaultPodOptions:
  annotations:
    diun.enable: "false"
    diun.include_tags: '^\d{1,2}\.\d{1,3}\.\d{1,3}$'
    diun.watch_repo: "true"
controllers:
  main:
    enabled: true
    type: deployment
    replicas: 1
    strategy: Recreate
    containers:
      main:
        image:
          repository: index.docker.io/gitea/gitea # {"$imagescan": "gitea-scan:name"}
          tag: 1.24.6 # {"$imagescan": "gitea-scan:tag"}
          pullPolicy: IfNotPresent
        env:
          GITEA_CUSTOM: /data/gitea
          ROOT_URL: https://gitea.tfmuocdfcarvajal.duckdns.org/
          USER: git
          USER_GID: "1000"
          USER_UID: "1000"
          RUN_MOD: prod
          SSH_DOMAIN: https://gitea.tfmuocdfcarvajal.duckdns.org/
          GITEA__actions__ENABLED: "true"
        envFrom:
          - secret: gitea-secret
        probes:
          liveness:
            enabled: true
          readiness:
            enabled: true
        resources:
          limits:
            memory: 256Mi
          requests:
            cpu: 100m
            memory: 128Mi
secrets:
  gitea-secret:
    enabled: true
    stringData:
      SECRET_KEY: 01ee62b84fc46dea5f1740dc00ea89c6b228f753c3ef1b12d73a3761201c978a98e63f6b932fc3e2834cbaf29ad504b5e7fb13005f04936844ee21c553399555
persistence:
  data:
    enabled: true
    type: persistentVolumeClaim
    name: data
    accessMode: ReadWriteOnce
    size: 1Gi
    retain: yes
    globalMounts:
      - path: /data
        readOnly: false
service:
  main:
    enabled: true
    nameOverride: web
    controller: main
    primary: true
    type: ClusterIP
    ports:
      web:
        enabled: true
        primary: true
        port: 80
        protocol: HTTP
        targetPort: 3000
ingress:
  main:
    enabled: true
    nameOverride: web
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt-prod
    labels:
      use-http01-prod: "true"
    hosts:
      - host: gitea.tfmuocdfcarvajal.duckdns.org
        paths:
          - path: /
            pathType: Prefix
            service:
              name: giteatfm
              identifier: giteatfm
              port: 80
    tls:
      - hosts:
          - gitea.tfmuocdfcarvajal.duckdns.org
        secretName: giteatfm-certificado-duckdns