stacks/template/stacks/forgejo/forgejo-server/values.yaml

# We use recreate to make sure only one instance with one version is running, because Forgejo might break or data gets inconsistant.
strategy:
  type: Recreate

redis-cluster:
  enabled: false

redis:
  enabled: false

postgresql:
  enabled: false

postgresql-ha:
  enabled: false

persistence:
  enabled: true
  size: 200Gi
  storageClass: csi-disk
  annotations:
    everest.io/crypt-key-id: {{{ .Env.PVC_KMS_KEY_ID }}}
    everest.io/disk-volume-type: GPSSD

test:
  enabled: false

deployment:
  env:
    - name: SSL_CERT_DIR
      value: /etc/ssl/forgejo

extraVolumeMounts:
  - mountPath: /etc/ssl/forgejo
    name: custom-database-certs-volume
    readOnly: true

extraVolumes:
  - name: custom-database-certs-volume
    secret:
      secretName: custom-database-certs

gitea:
  metrics:
    enabled: true
    serviceMonitor:
      enabled: true
  additionalConfigFromEnvs:
    - name: FORGEJO__storage__MINIO_ACCESS_KEY_ID
      valueFrom:
        secretKeyRef:
          name: forgejo-cloud-credentials
          key: access-key
    - name: FORGEJO__storage__MINIO_SECRET_ACCESS_KEY
      valueFrom:
        secretKeyRef:
          name: forgejo-cloud-credentials
          key: secret-key
    - name: FORGEJO__queue__CONN_STR
      valueFrom:
        secretKeyRef:
          name: redis-forgejo-cloud-credentials
          key: connection-string
    - name: FORGEJO__session__PROVIDER_CONFIG
      valueFrom:
        secretKeyRef:
          name: redis-forgejo-cloud-credentials
          key: connection-string
    - name: FORGEJO__cache__HOST
      valueFrom:
        secretKeyRef:
          name: redis-forgejo-cloud-credentials
          key: connection-string
    - name: FORGEJO__database__HOST
      valueFrom:
        secretKeyRef:
          name: postgres-forgejo-cloud-credentials
          key: host_port
    - name: FORGEJO__database__NAME
      valueFrom:
        secretKeyRef:
          name: postgres-forgejo-cloud-credentials
          key: database
    - name: FORGEJO__database__USER
      valueFrom:
        secretKeyRef:
          name: postgres-forgejo-cloud-credentials
          key: username
    - name: FORGEJO__database__PASSWD
      valueFrom:
        secretKeyRef:
          name: postgres-forgejo-cloud-credentials
          key: password
    # Either 'elasticsearch' or 'bleve' (go in memory search engine)
    - name: FORGEJO__indexer__ISSUE_INDEXER_TYPE
      valueFrom:
        secretKeyRef:
          name: elasticsearch-cloud-credentials
          key: type
    - name: FORGEJO__indexer__ISSUE_INDEXER_CONN_STR
      valueFrom:
        secretKeyRef:
          name: elasticsearch-cloud-credentials
          key: connection-string
    - name: FORGEJO__indexer__ISSUE_INDEXER_ENABLED
      valueFrom:
        secretKeyRef:
          name: elasticsearch-cloud-credentials
          key: enabled
    - name: FORGEJO__mailer__PASSWD
      valueFrom:
        secretKeyRef:
          name: email-user-credentials
          key: connection-string

  admin:
    existingSecret: gitea-credential

  config:
    APP_NAME: 'EDP'
    APP_SLOGAN: 'Build your thing in minutes'
    storage:
      MINIO_ENDPOINT: obs.eu-de.otc.t-systems.com:443
      STORAGE_TYPE: minio
      MINIO_LOCATION: eu-de
      MINIO_BUCKET: "{{{ getenv "FORGEJO_BUCKET_NAME" }}}"
      MINIO_USE_SSL: true

    queue:
      TYPE: redis

    session:
      PROVIDER: redis

    cache:
      ENABLED: true
      ADAPTER: redis

    security:
      GLOBAL_TWO_FACTOR_REQUIREMENT: admin

    service:
      DISABLE_REGISTRATION: true
      ENABLE_NOTIFY_MAIL: true

    other:
      SHOW_FOOTER_VERSION: false
      SHOW_FOOTER_TEMPLATE_LOAD_TIME: false

    database:
      DB_TYPE: postgres
      SSL_MODE: verify-ca

    server:
      DOMAIN: '{{{ .Env.DOMAIN_GITEA }}}'
      ROOT_URL: 'https://{{{ .Env.DOMAIN_GITEA }}}:443'

    mailer:
      ENABLED: true
      USER: ipcei-cis-devfw@mms-support.de
      PROTOCOL: smtps
      FROM: '"IPCEI CIS DevFW" <ipcei-cis-devfw@mms-support.de>'
      SMTP_ADDR: mail.mms-support.de
      SMTP_PORT: 465

service:
  ssh:
    type: LoadBalancer
    nodePort: 32222
    externalTrafficPolicy: Cluster
    annotations:
      kubernetes.io/elb.id: {{{ .Env.LOADBALANCER_ID }}}

image:
  pullPolicy: "IfNotPresent"
  # Overrides the image tag whose default is the chart appVersion.
  #tag: "8.0.3"
  # Adds -rootless suffix to image name
  # rootless: true
  fullOverride: {{{ getenv "CLIENT_REPO_DOMAIN" }}}/devfw-cicd/edp-forgejo:{{{ .Env.FORGEJO_IMAGE_TAG }}}

forgejo: {}