helm-gitea/values.yaml

# Default values for gitea.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.
## @section Global
#
## @param global.imageRegistry global image registry override.
## @param global.imagePullSecrets global image pull secrets override; can be extended by `imagePullSecrets`.
## @param global.hostAliases global hostAliases which will be added to the pod's hosts files.
global:
  imageRegistry: ""
  ## E.g.
  ## imagePullSecrets:
  ##   - myRegistryKeySecretName
  ##
  imagePullSecrets: []
  hostAliases: []
  # - ip: 192.168.137.2
  #   hostnames:
  #   - example.com


## @section deployment
deployment:
  ## @param deployment.enabled Enable the deployment of Gitea.
  ## @param deployment.annotations Annotations for the Gitea deployment to be created.
  ## @param deployment.labels Labels for the deployment.
  enabled: true
  annotations: {}
  labels: {}

  ## @param deployment.affinity Affinity for the deployment.
  affinity: {}
    # nodeAffinity:
    #   requiredDuringSchedulingIgnoredDuringExecution:
    #     nodeSelectorTerms:
    #     - matchExpressions:
    #       - key: kubernetes.io/os
    #         operator: In
    #         values:
    #         - linux
    #   preferredDuringSchedulingIgnoredDuringExecution:
    #   - weight: 20
    #     preference:
    #       matchExpressions:
    #       - key: kubernetes.io/arch
    #         operator: In
    #         values:
    #         - amd64

  ## @param deployment.dnsConfig dnsConfig of the Gitea deployment.
  dnsConfig: {}
    # nameservers:
    # - 192.0.2.1 # this is an example
    # searches:
    # - ns1.svc.cluster-domain.example
    # - my.dns.search.suffix
    # options:
    # - name: ndots
    #   value: "2"
    # - name: edns0

  gitea:
    ## @param deployment.gitea.env Additional environment variables to pass to the gitea container.
    env: []
    # - name: VARIABLE
    #   value: my-value

    ## @param deployment.gitea.envFrom List of environment variables mounted from configMaps or secrets for the gitea container.
    envFrom: []
    # - configMapRef:
    #     name: special-config
    # - secretRef:
    #     name: special-secret

    ## @param deployment.gitea.image.registry image registry, e.g. gcr.io,docker.io.
    ## @param deployment.gitea.image.repository Image to start for this pod.
    ## @param deployment.gitea.image.tag Visit: [Image tag](https://hub.docker.com/r/gitea/gitea/tags?page=1&ordering=last_updated). Defaults to `appVersion` within Chart.yaml.
    ## @param deployment.gitea.image.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`.
    ## @param deployment.gitea.image.pullPolicy Image pull policy.
    ## @param deployment.gitea.image.rootless Wether or not to pull the rootless version of Gitea, only works on Gitea 1.14.x or higher.
    ## @param deployment.gitea.image.fullOverride Completely overrides the image registry, path/image, tag and digest. **Adjust `deployment.gitea.image.rootless` accordingly and review [Rootless defaults](#rootless-defaults)**.
    image:
      registry: "docker.gitea.com"
      repository: gitea
      tag: ""
      digest: ""
      pullPolicy: IfNotPresent
      rootless: true
      fullOverride: ""

    ## @param deployment.gitea.resources Compute Resources required by Gitea container. Cannot be updated.
    ## @skip deployment.gitea.resources.claims Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
    ## @skip deployment.gitea.resources.limits Limits describes the maximum amount of compute resources allowed for this container.
    ## @skip deployment.gitea.resources.requests Requests describes the minimum amount of compute resources required for this container.
    resources:
    # claims: []
    #   - name: ""
    #     request: ""
    # limits:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi
    # requests:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi

    ## @param deployment.gitea.securityContext Security context of the Gitea container. Used as fallback for the chart-managed init containers.
    securityContext: {}
    #   allowPrivilegeEscalation: false
    #   capabilities:
    #     drop:
    #       - ALL
    #   # Add the SYS_CHROOT capability for root and rootless images if you intend to
    #   # run pods on nodes that use the container runtime cri-o. Otherwise, you will
    #   # get an error message from the SSH server that it is not possible to read from
    #   # the repository.
    #   # https://gitea.com/gitea/helm-gitea/issues/161
    #     add:
    #       - SYS_CHROOT
    #   privileged: false
    #   readOnlyRootFilesystem: true
    #   runAsGroup: 1000
    #   runAsNonRoot: true
    #   runAsUser: 1000

    ## @param deployment.gitea.volumeMounts Additional volume mounts.
    volumeMounts: []
    # - name: my-configmap-volume
    #   mountPath: /configmap
    #   readOnly: true

  ## @param deployment.hostUsers Use the host's user namespace. When unset, the field is omitted so the platform default is used.
  hostUsers: ~

  ## @param deployment.initContainers [array] List of initContainers. The order is important. First init container in the list will be executed first. The link refers to the corresponding init container configuration.
  initContainers:
    # - container:
    #     command: [ "sh", "-c", "echo hello world" ]
    #     image: "docker.io/library/busybox:latest"
    #     name: pre-task
    - link: "initDirectories"
    - link: "initAppIni"
    - link: "initConfigureGPG"
    - link: "initConfigureGitea"
    # - container:
    #     command: [ "sh", "-c", "echo hello world" ]
    #     image: "docker.io/library/busybox:latest"
    #     name: post-task

  initDirectories:
    ## @param deployment.initDirectories.env Additional environment variables to pass to the init container.
    env: []
    # - name: VARIABLE
    #   value: my-value

    ## @param deployment.initDirectories.envFrom List of environment variables mounted from configMaps or secrets for the initDirectories container.
    envFrom: []
    # - configMapRef:
    #     name: special-config
    # - secretRef:
    #     name: special-secret

    ## @param deployment.initDirectories.image.registry image registry, e.g. gcr.io,docker.io.
    ## @param deployment.initDirectories.image.repository Image to start for this pod.
    ## @param deployment.initDirectories.image.tag Visit: [Image tag](https://hub.docker.com/r/gitea/gitea/tags?page=1&ordering=last_updated). Defaults to `appVersion` within Chart.yaml.
    ## @param deployment.initDirectories.image.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`.
    ## @param deployment.initDirectories.image.pullPolicy Image pull policy.
    ## @param deployment.initDirectories.image.rootless Wether or not to pull the rootless version of Gitea, only works on Gitea 1.14.x or higher.
    ## @param deployment.initDirectories.image.fullOverride Completely overrides the image registry, path/image, tag and digest. **Adjust `deployment.initDirectories.image.rootless` accordingly and review [Rootless defaults](#rootless-defaults)**.
    image:
      registry: "docker.gitea.com"
      repository: gitea
      tag: ""
      digest: ""
      pullPolicy: IfNotPresent
      rootless: true
      fullOverride: ""

    ## @param deployment.initDirectories.resources Compute Resources required by the initDirectories container. Defaults to `initContainers.resources`. Cannot be updated.
    ## @skip deployment.initDirectories.resources.claims Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
    ## @skip deployment.initDirectories.resources.limits Limits describes the maximum amount of compute resources allowed for this container.
    ## @skip deployment.initDirectories.resources.requests Requests describes the minimum amount of compute resources required for this container.
    resources:
    # claims: []
    #   - name: ""
    #     request: ""
    # limits:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi
    # requests:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi

    ## @param deployment.initDirectories.securityContext Security context of the initDirectories container. Defaults to `deployment.gitea.securityContext`.
    securityContext: {}
    #   allowPrivilegeEscalation: false
    #   capabilities:
    #     drop:
    #       - ALL
    #   # Add the SYS_CHROOT capability for root and rootless images if you intend to
    #   # run pods on nodes that use the container runtime cri-o. Otherwise, you will
    #   # get an error message from the SSH server that it is not possible to read from
    #   # the repository.
    #   # https://gitea.com/gitea/helm-gitea/issues/161
    #     add:
    #       - SYS_CHROOT
    #   privileged: false
    #   readOnlyRootFilesystem: true
    #   runAsGroup: 1000
    #   runAsNonRoot: true
    #   runAsUser: 1000

    ## @param deployment.initDirectories.volumeMounts Additional volume mounts.
    volumeMounts: []
    # - name: my-configmap-volume
    #   mountPath: /configmap
    #   readOnly: true

  initAppIni:
    ## @param deployment.initAppIni.env Additional environment variables to pass to the init container.
    env: []
    # - name: VARIABLE
    #   value: my-value

    ## @param deployment.initAppIni.envFrom List of environment variables mounted from configMaps or secrets for the initAppIni container.
    envFrom: []
    # - configMapRef:
    #     name: special-config
    # - secretRef:
    #     name: special-secret

    ## @param deployment.initAppIni.image.registry image registry, e.g. gcr.io,docker.io.
    ## @param deployment.initAppIni.image.repository Image to start for this pod.
    ## @param deployment.initAppIni.image.tag Visit: [Image tag](https://hub.docker.com/r/gitea/gitea/tags?page=1&ordering=last_updated). Defaults to `appVersion` within Chart.yaml.
    ## @param deployment.initAppIni.image.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`.
    ## @param deployment.initAppIni.image.pullPolicy Image pull policy.
    ## @param deployment.initAppIni.image.rootless Wether or not to pull the rootless version of Gitea, only works on Gitea 1.14.x or higher.
    ## @param deployment.initAppIni.image.fullOverride Completely overrides the image registry, path/image, tag and digest. **Adjust `deployment.initAppIni.image.rootless` accordingly and review [Rootless defaults](#rootless-defaults)**.
    image:
      registry: "docker.gitea.com"
      repository: gitea
      tag: ""
      digest: ""
      pullPolicy: IfNotPresent
      rootless: true
      fullOverride: ""

    ## @param deployment.initAppIni.resources Compute Resources required by the initAppIni container. Defaults to `initContainers.resources`. Cannot be updated.
    ## @skip deployment.initAppIni.resources.claims Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
    ## @skip deployment.initAppIni.resources.limits Limits describes the maximum amount of compute resources allowed for this container.
    ## @skip deployment.initAppIni.resources.requests Requests describes the minimum amount of compute resources required for this container.
    resources:
    # claims: []
    #   - name: ""
    #     request: ""
    # limits:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi
    # requests:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi

    ## @param deployment.initAppIni.securityContext Security context of the initAppIni container. Defaults to `deployment.gitea.securityContext`.
    securityContext: {}
    #   allowPrivilegeEscalation: false
    #   capabilities:
    #     drop:
    #       - ALL
    #   # Add the SYS_CHROOT capability for root and rootless images if you intend to
    #   # run pods on nodes that use the container runtime cri-o. Otherwise, you will
    #   # get an error message from the SSH server that it is not possible to read from
    #   # the repository.
    #   # https://gitea.com/gitea/helm-gitea/issues/161
    #     add:
    #       - SYS_CHROOT
    #   privileged: false
    #   readOnlyRootFilesystem: true
    #   runAsGroup: 1000
    #   runAsNonRoot: true
    #   runAsUser: 1000

    ## @param deployment.initAppIni.volumeMounts Additional volume mounts.
    volumeMounts: []
    # - name: my-configmap-volume
    #   mountPath: /configmap
    #   readOnly: true

  initConfigureGPG:
    ## @param deployment.initConfigureGPG.env Additional environment variables to pass to the init container.
    env: []
    # - name: VARIABLE
    #   value: my-value

    ## @param deployment.initConfigureGPG.envFrom List of environment variables mounted from configMaps or secrets for the initConfigureGPG container.
    envFrom: []
    # - configMapRef:
    #     name: special-config
    # - secretRef:
    #     name: special-secret

    ## @param deployment.initConfigureGPG.image.registry image registry, e.g. gcr.io,docker.io.
    ## @param deployment.initConfigureGPG.image.repository Image to start for this pod.
    ## @param deployment.initConfigureGPG.image.tag Visit: [Image tag](https://hub.docker.com/r/gitea/gitea/tags?page=1&ordering=last_updated). Defaults to `appVersion` within Chart.yaml.
    ## @param deployment.initConfigureGPG.image.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`.
    ## @param deployment.initConfigureGPG.image.pullPolicy Image pull policy.
    ## @param deployment.initConfigureGPG.image.rootless Wether or not to pull the rootless version of Gitea, only works on Gitea 1.14.x or higher.
    ## @param deployment.initConfigureGPG.image.fullOverride Completely overrides the image registry, path/image, tag and digest. **Adjust `deployment.initConfigureGPG.image.rootless` accordingly and review [Rootless defaults](#rootless-defaults)**.
    image:
      registry: "docker.gitea.com"
      repository: gitea
      tag: ""
      digest: ""
      pullPolicy: IfNotPresent
      rootless: true
      fullOverride: ""

    ## @param deployment.initConfigureGPG.resources Compute Resources required by the initConfigureGPG container. Defaults to `initContainers.resources`. Cannot be updated.
    ## @skip deployment.initConfigureGPG.resources.claims Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
    ## @skip deployment.initConfigureGPG.resources.limits Limits describes the maximum amount of compute resources allowed for this container.
    ## @skip deployment.initConfigureGPG.resources.requests Requests describes the minimum amount of compute resources required for this container.
    resources:
    # claims: []
    #   - name: ""
    #     request: ""
    # limits:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi
    # requests:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi

    ## @param deployment.initConfigureGPG.securityContext Security context of the initConfigureGPG container. Defaults to `deployment.gitea.securityContext`.
    securityContext: {}
    #   allowPrivilegeEscalation: false
    #   capabilities:
    #     drop:
    #       - ALL
    #   # Add the SYS_CHROOT capability for root and rootless images if you intend to
    #   # run pods on nodes that use the container runtime cri-o. Otherwise, you will
    #   # get an error message from the SSH server that it is not possible to read from
    #   # the repository.
    #   # https://gitea.com/gitea/helm-gitea/issues/161
    #     add:
    #       - SYS_CHROOT
    #   privileged: false
    #   readOnlyRootFilesystem: true
    #   runAsGroup: 1000
    #   runAsNonRoot: true
    #   runAsUser: 1000

    ## @param deployment.initConfigureGPG.volumeMounts Additional volume mounts.
    volumeMounts: []
    # - name: my-configmap-volume
    #   mountPath: /configmap
    #   readOnly: true

  initConfigureGitea:
    ## @param deployment.initConfigureGitea.env Additional environment variables to pass to the init container.
    env: []
    # - name: VARIABLE
    #   value: my-value

    ## @param deployment.initConfigureGitea.envFrom List of environment variables mounted from configMaps or secrets for the initConfigureGitea container.
    envFrom: []
    # - configMapRef:
    #     name: special-config
    # - secretRef:
    #     name: special-secret

    ## @param deployment.initConfigureGitea.image.registry image registry, e.g. gcr.io,docker.io.
    ## @param deployment.initConfigureGitea.image.repository Image to start for this pod.
    ## @param deployment.initConfigureGitea.image.tag Visit: [Image tag](https://hub.docker.com/r/gitea/gitea/tags?page=1&ordering=last_updated). Defaults to `appVersion` within Chart.yaml.
    ## @param deployment.initConfigureGitea.image.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`.
    ## @param deployment.initConfigureGitea.image.pullPolicy Image pull policy.
    ## @param deployment.initConfigureGitea.image.rootless Wether or not to pull the rootless version of Gitea, only works on Gitea 1.14.x or higher.
    ## @param deployment.initConfigureGitea.image.fullOverride Completely overrides the image registry, path/image, tag and digest. **Adjust `deployment.initConfigureGitea.image.rootless` accordingly and review [Rootless defaults](#rootless-defaults)**.
    image:
      registry: "docker.gitea.com"
      repository: gitea
      tag: ""
      digest: ""
      pullPolicy: IfNotPresent
      rootless: true
      fullOverride: ""

    ## @param deployment.initConfigureGitea.resources Compute Resources required by the initConfigureGitea container. Defaults to `initContainers.resources`. Cannot be updated.
    ## @skip deployment.initConfigureGitea.resources.claims Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container.
    ## @skip deployment.initConfigureGitea.resources.limits Limits describes the maximum amount of compute resources allowed for this container.
    ## @skip deployment.initConfigureGitea.resources.requests Requests describes the minimum amount of compute resources required for this container.
    resources:
    # claims: []
    #   - name: ""
    #     request: ""
    # limits:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi
    # requests:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi

    ## @param deployment.initConfigureGitea.securityContext Security context of the initConfigureGitea container. Defaults to `deployment.gitea.securityContext`.
    securityContext: {}
    #   allowPrivilegeEscalation: false
    #   capabilities:
    #     drop:
    #       - ALL
    #   # Add the SYS_CHROOT capability for root and rootless images if you intend to
    #   # run pods on nodes that use the container runtime cri-o. Otherwise, you will
    #   # get an error message from the SSH server that it is not possible to read from
    #   # the repository.
    #   # https://gitea.com/gitea/helm-gitea/issues/161
    #     add:
    #       - SYS_CHROOT
    #   privileged: false
    #   readOnlyRootFilesystem: true
    #   runAsGroup: 1000
    #   runAsNonRoot: true
    #   runAsUser: 1000

    ## @param deployment.initConfigureGitea.volumeMounts Additional volume mounts.
    volumeMounts: []
    # - name: my-configmap-volume
    #   mountPath: /configmap
    #   readOnly: true

  ## @param deployment.nodeSelector NodeSelector for the deployment.
  nodeSelector: {}

  ## @param deployment.priorityClassName priorityClassName for the deployment.
  priorityClassName: ""

  ## @param deployment.replicas Number of replicas for the Gitea deployment.
  replicas: 1

  ## @param deployment.resources Resources is the total amount of CPU and Memory resources required by all containers in the pod.
  ## @skip deployment.resources.limits Limits describes the maximum amount of compute resources allowed.
  ## @skip deployment.resources.requests Requests describes the minimum amount of compute resources required.
  resources: {}
    # limits:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi
    # requests:
    #   ephemeral: 100Mi
    #   cpu: 100m
    #   memory: 128Mi

  ## @param deployment.schedulerName Use an alternate scheduler, e.g. "stork".
  schedulerName: ""

  ## @param deployment.securityContext Pod security context. On non-OpenShift clusters the chart defaults `fsGroup` to `1000` when this map is empty.
  securityContext: {}

  ## @param deployment.strategy.type Deployment strategy used to replace old pods, either `RollingUpdate` or `Recreate`.
  ## @param deployment.strategy.rollingUpdate.maxSurge Number or percentage of pods that may be created above the desired replica count. Only used with `RollingUpdate`.
  ## @param deployment.strategy.rollingUpdate.maxUnavailable Number or percentage of pods that may be unavailable during the update. Only used with `RollingUpdate`.
  strategy:
    type: "RollingUpdate"
    rollingUpdate:
      maxSurge: "100%"
      maxUnavailable: 0

  ## @param deployment.terminationGracePeriodSeconds How long to wait until forcefully kill the pod.
  terminationGracePeriodSeconds: 60

  ## @param deployment.tolerations Tolerations of the Gitea deployment.
  tolerations: []
  # - key: database/type
  #   operator: Equal
  #   value: postgres
  #   effect: NoSchedule

  ## @param deployment.topologySpreadConstraints TopologySpreadConstraints for the deployment.
  topologySpreadConstraints: []
  # - topologyKey: kubernetes.io/hostname
  #   whenUnsatisfiable: DoNotSchedule
  #   labelSelector:
  #     matchLabels:
  #       app.kubernetes.io/instance: gitea


  ## @param deployment.volumes Additional volumes to mount into the pods of the Gitea deployment.
  volumes: []
  # - name: my-configmap-volume
  #   config:
  #     name: my-configmap
  # - name: my-secret-volume
  #   secret:
  #     secretName: my-secret


## @section Gateway API
## See docs/gateway-api.md for full guidance.
gatewayAPI:
  ## @param gatewayAPI.enabled Enable deployment of Gateway API resources.
  enabled: false

  core:
    ## @param gatewayAPI.core.backendTLSPolicy.enabled Render a BackendTLSPolicy resource for encrypted backend traffic.
    ## @param gatewayAPI.core.backendTLSPolicy.annotations Annotations applied to the BackendTLSPolicy.
    ## @param gatewayAPI.core.backendTLSPolicy.labels Additional labels applied to the BackendTLSPolicy.
    ## @param gatewayAPI.core.backendTLSPolicy.targetRefs Target references for the BackendTLSPolicy. Defaults to the HTTP service.
    ## @param gatewayAPI.core.backendTLSPolicy.validation Validation configuration (required when enabled). See `docs/gateway-api.md`.
    ## @extra gatewayAPI.core.backendTLSPolicy.validation.caCertificateRefs CA certificate references for the BackendTLSPolicy validation. See `docs/gateway-api.md`.
    ## @extra gatewayAPI.core.backendTLSPolicy.validation.hostname Hostname for the BackendTLSPolicy validation. Must be the Common Name (CN) or a Subject Alternative Name (SAN) of the gitea server certificate. See `docs/gateway-api.md`.
    backendTLSPolicy:
      enabled: false
      annotations: {}
      labels: {}
      targetRefs: []
      validation: {}
      #  caCertificateRefs:
      #    - name: gitea-ca
      #      group: ""
      #      kind: ConfigMap
      #  hostname: gitea-http

    ## @param gatewayAPI.core.httpRoute.enabled Render an HTTPRoute resource.
    ## @param gatewayAPI.core.httpRoute.annotations Annotations applied to the HTTPRoute.
    ## @param gatewayAPI.core.httpRoute.labels Additional labels applied to the HTTPRoute.
    ## @param gatewayAPI.core.httpRoute.tls When true, treat the upstream Gateway as terminating TLS so `ROOT_URL` uses `https`.
    ## @param gatewayAPI.core.httpRoute.parentRefs Parent gateway references (required when enabled).
    ## @param gatewayAPI.core.httpRoute.hostnames List of hostnames for the HTTPRoute.
    ## @param gatewayAPI.core.httpRoute.rules Custom routing rules. Defaults to a PathPrefix `/` rule targeting the HTTP service.
    httpRoute:
      enabled: false
      annotations: {}
      labels: {}
      tls: false
      parentRefs: []
      # - group: gateway.networking.k8s.io
      #   kind: Gateway
      #   name: shared-gateway
      #   namespace: gateway-system
      #   sectionName: http
      hostnames: []
      # - git.example.com
      rules: []


    ## @param gatewayAPI.core.tcpRoute.enabled Render a TCPRoute resource (typically for SSH).
    ## @param gatewayAPI.core.tcpRoute.annotations Annotations applied to the TCPRoute.
    ## @param gatewayAPI.core.tcpRoute.labels Additional labels applied to the TCPRoute.
    ## @param gatewayAPI.core.tcpRoute.parentRefs Parent gateway references (required when enabled).
    ## @param gatewayAPI.core.tcpRoute.rules Custom routing rules. Defaults to a rule targeting the SSH service.
    tcpRoute:
      enabled: false
      annotations: {}
      labels: {}
      parentRefs: []
      # - group: gateway.networking.k8s.io
      #   kind: Gateway
      #   name: shared-gateway
      #   namespace: gateway-system
      #   sectionName: ssh
      rules: []


  ## NGINX Gateway Fabric specific resources. Only relevant when the upstream
  ## Gateway is backed by NGINX Gateway Fabric (nginx.org). Other implementations
  ## (Envoy Gateway, Cilium, ...) do not impose a default request body size limit.
  nginx:
    ## @param gatewayAPI.nginx.clientSettingsPolicies.enabled Render a ClientSettingsPolicy (NGINX Gateway Fabric) to raise the client request body limit.
    ## @param gatewayAPI.nginx.clientSettingsPolicies.annotations Annotations applied to the ClientSettingsPolicy.
    ## @param gatewayAPI.nginx.clientSettingsPolicies.labels Additional labels applied to the ClientSettingsPolicy.
    ## @param gatewayAPI.nginx.clientSettingsPolicies.targetRef Target reference for the ClientSettingsPolicy. Defaults to the chart's HTTPRoute.
    ## @param gatewayAPI.nginx.clientSettingsPolicies.body Client body settings (required when enabled), e.g. `maxSize`. See `docs/gateway-api.md`.
    clientSettingsPolicies:
      enabled: false
      annotations: {}
      labels: {}
      targetRef: {}
      body: {}
      #   maxSize: 100m


## @section Ingress
## @param ingress.enabled Enable ingress.
## @param ingress.annotations Additional annotations.
## @param ingress.labels Additional labels.
## @param ingress.className DEPRECATED: Ingress class name.
## @param ingress.pathType Ingress Path Type.
## @param ingress.hosts[0].host Default Ingress host.
## @param ingress.hosts[0].paths[0].path Default Ingress path.
## @param ingress.tls Ingress tls settings.
ingress:
  enabled: false
  annotations: {}
  labels: {}
  className: "nginx"
  pathType: Prefix
  hosts:
    - host: git.example.com
      paths:
        - path: /
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - git.example.com


## @param namespace An explicit namespace to deploy gitea into. Defaults to the release namespace if not specified.
namespace: ""


## @section Network
## @param clusterDomain Domain of the Cluster. Domain is part of internally issued certificates.
clusterDomain: cluster.local


## @section Image
## @param imagePullSecrets Secret to use for pulling the image.
imagePullSecrets: []


## @section Security
# Security context is only usable with rootless image due to image design
## @param openshift.enabled Enable OpenShift compatibility defaults for chart-managed pods. Defaults to auto-detect based on the SecurityContextConstraints API.
openshift:
  enabled: null


## @param podDisruptionBudget Pod disruption budget.
podDisruptionBudget: {}
#  maxUnavailable: 1
#  minAvailable: 1


## @section Route
## @param route.enabled Enable OpenShift Route.
## @param route.annotations Route annotations.
## @param route.host Route host. When unset, OpenShift may generate one and Gitea URL defaults fall back to ingress/service values.
## @param route.path Route path.
## @param route.wildcardPolicy Route wildcard policy.
## @param route.tls.termination Route TLS termination type.
## @param route.tls.insecureEdgeTerminationPolicy Route insecure edge termination policy.
## @param route.tls.key Route TLS key.
## @param route.tls.certificate Route TLS certificate.
## @param route.tls.caCertificate Route TLS CA certificate.
## @param route.tls.destinationCACertificate Route destination CA certificate.
route:
  enabled: false
  annotations: {}
  host: ""
  path: ""
  wildcardPolicy: None
  tls:
    termination:
    insecureEdgeTerminationPolicy:
    key:
    certificate:
    caCertificate:
    destinationCACertificate:


## @section Secrets
secrets:
  admin:
    ## @param secrets.admin.enabled Create and keep the Gitea admin user in sync.
    enabled: true

    ## @param secrets.admin.addSHASumAnnotation Add a pod annotation with the SHA sum of the admin Secret to trigger a rollout on change. Further information can be found in the [documentation](./README.md#secret-checksum-annotation).
    addSHASumAnnotation: false

    ## @param secrets.admin.passwordMode Mode for how to set/update the admin user password. Options are: initialOnlyNoReset, initialOnlyRequireReset, and keepUpdated.
    passwordMode: keepUpdated

    ## @param secrets.admin.existingSecret.enabled Use an already existing Secret instead of creating the admin Secret.
    ## @param secrets.admin.existingSecret.secretName Name of the already existing admin Secret.
    ## @param secrets.admin.existingSecret.emailKey Key of the email address in the existing admin Secret.
    ## @param secrets.admin.existingSecret.passwordKey Key of the password in the existing admin Secret.
    ## @param secrets.admin.existingSecret.usernameKey Key of the username in the existing admin Secret.
    existingSecret:
      enabled: false
      secretName: ""
      emailKey: email
      passwordKey: password
      usernameKey: username

    ## @param secrets.admin.new.annotations Annotations for the admin Secret.
    ## @param secrets.admin.new.labels Labels for the admin Secret.
    ## @param secrets.admin.new.email Email of the Gitea admin user.
    ## @param secrets.admin.new.password Password of the Gitea admin user.
    ## @param secrets.admin.new.username Username of the Gitea admin user.
    new:
      annotations: {}
      labels: {}
      email: gitea@local.domain
      password: r8sA8CPHD9!bt6d
      username: gitea_admin

  config:
    ## @param secrets.config.enabled Enable mounting of the config Secret.
    enabled: true

    ## @param secrets.config.addSHASumAnnotation Add a pod annotation with the SHA sum of the config Secret to trigger a rollout on change. Further information can be found in the [documentation](./README.md#secret-checksum-annotation).
    addSHASumAnnotation: false

    ## @param secrets.config.existingSecret.enabled Use an already existing Secret instead of creating the config Secret.
    ## @param secrets.config.existingSecret.secretName Name of the already existing config Secret.
    existingSecret:
      enabled: false
      secretName: ""

    ## @param secrets.config.new.annotations Annotations for the config Secret.
    ## @param secrets.config.new.labels Labels for the config Secret.
    new:
      annotations: {}
      labels: {}

  gpg:
    ## @param secrets.gpg.enabled Enable mounting of a GPG key to sign git commits.
    enabled: false

    ## @param secrets.gpg.addSHASumAnnotation Add a pod annotation with the SHA sum of the GPG key Secret to trigger a rollout on change. Further information can be found in the [documentation](./README.md#secret-checksum-annotation).
    addSHASumAnnotation: false

    ## @param secrets.gpg.existingSecret.enabled Use an already existing Secret instead of creating the GPG key Secret.
    ## @param secrets.gpg.existingSecret.secretName Name of the already existing GPG key Secret.
    ## @param secrets.gpg.existingSecret.gpgHomeKey Key of the GPG home directory in the existing GPG key Secret.
    ## @param secrets.gpg.existingSecret.privateKeyKey Key of the private key in the existing GPG key Secret.
    existingSecret:
      enabled: false
      secretName: ""
      gpgHomeKey: gpgHome
      privateKeyKey: privateKey

    ## @param secrets.gpg.new.annotations Annotations for the GPG key Secret.
    ## @param secrets.gpg.new.labels Labels for the GPG key Secret.
    ## @param secrets.gpg.new.gpgHome Path to the GPG home directory.
    ## @param secrets.gpg.new.privateKey Content of the private GPG key in armored format.
    new:
      annotations: {}
      labels: {}
      gpgHome: /data/git/.gnupg
      privateKey: ""
      # privateKey: |-
      #   -----BEGIN PGP PRIVATE KEY BLOCK-----
      #   ...
      #   -----END PGP PRIVATE KEY BLOCK-----

  init:
    ## @param secrets.init.enabled Enable mounting of the init Secret.
    enabled: true

    ## @param secrets.init.addSHASumAnnotation Add a pod annotation with the SHA sum of the init Secret to trigger a rollout on change. Further information can be found in the [documentation](./README.md#secret-checksum-annotation).
    addSHASumAnnotation: false

    ## @param secrets.init.existingSecret.enabled Use an already existing Secret instead of creating the init Secret.
    ## @param secrets.init.existingSecret.secretName Name of the already existing init Secret.
    existingSecret:
      enabled: false
      secretName: ""

    ## @param secrets.init.new.annotations Annotations for the init Secret.
    ## @param secrets.init.new.labels Labels for the init Secret.
    new:
      annotations: {}
      labels: {}

  inlineConfig:
    ## @param secrets.inlineConfig.enabled Enable mounting of the inline configuration Secret.
    enabled: true

    ## @param secrets.inlineConfig.addSHASumAnnotation Add a pod annotation with the SHA sum of the inline configuration Secret to trigger a rollout on change. Further information can be found in the [documentation](./README.md#secret-checksum-annotation).
    addSHASumAnnotation: false

    ## @param secrets.inlineConfig.existingSecret.enabled Use an already existing Secret instead of creating the inline configuration Secret.
    ## @param secrets.inlineConfig.existingSecret.secretName Name of the already existing inline configuration Secret.
    existingSecret:
      enabled: false
      secretName: ""

    ## @param secrets.inlineConfig.new.annotations Annotations for the inline configuration Secret.
    ## @param secrets.inlineConfig.new.labels Labels for the inline configuration Secret.
    new:
      annotations: {}
      labels: {}

  metrics:
    ## @param secrets.metrics.enabled Enable mounting of the metrics Secret.
    enabled: true

    ## @param secrets.metrics.addSHASumAnnotation Add a pod annotation with the SHA sum of the metrics Secret to trigger a rollout on change. Further information can be found in the [documentation](./README.md#secret-checksum-annotation).
    addSHASumAnnotation: false

    ## @param secrets.metrics.existingSecret.enabled Use an already existing Secret instead of creating the metrics Secret.
    ## @param secrets.metrics.existingSecret.secretName Name of the already existing metrics Secret.
    existingSecret:
      enabled: false
      secretName: ""

    ## @param secrets.metrics.new.annotations Annotations for the metrics Secret.
    ## @param secrets.metrics.new.labels Labels for the metrics Secret.
    new:
      annotations: {}
      labels: {}


## @section Service
service:
  ## @param service.http.type Kubernetes service type for web traffic.
  ## @param service.http.port Port number for web traffic.
  ## @param service.http.clusterIP ClusterIP setting for http autosetup for deployment is None.
  ## @param service.http.loadBalancerIP LoadBalancer IP setting.
  ## @param service.http.nodePort NodePort for http service.
  ## @param service.http.externalTrafficPolicy If `service.http.type` is `NodePort` or `LoadBalancer`, set this to `Local` to enable source IP preservation.
  ## @param service.http.externalIPs External IPs for service.
  ## @param service.http.ipFamilyPolicy HTTP service dual-stack policy.
  ## @param service.http.ipFamilies HTTP service dual-stack familiy selection,for dual-stack parameters see official kubernetes [dual-stack concept documentation](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).
  ## @param service.http.loadBalancerSourceRanges Source range filter for http loadbalancer.
  ## @param service.http.annotations HTTP service annotations.
  ## @param service.http.labels HTTP service additional labels.
  ## @param service.http.loadBalancerClass Loadbalancer class.
  http:
    type: ClusterIP
    port: 3000
    clusterIP: None
    loadBalancerIP:
    nodePort:
    externalTrafficPolicy:
    externalIPs:
    ipFamilyPolicy:
    ipFamilies:
    loadBalancerSourceRanges: []
    annotations: {}
    labels: {}
    loadBalancerClass:

  ## @param service.ssh.type Kubernetes service type for ssh traffic.
  ## @param service.ssh.port Port number for ssh traffic.
  ## @param service.ssh.clusterIP ClusterIP setting for ssh autosetup for deployment is None.
  ## @param service.ssh.loadBalancerIP LoadBalancer IP setting.
  ## @param service.ssh.nodePort NodePort for ssh service.
  ## @param service.ssh.externalTrafficPolicy If `service.ssh.type` is `NodePort` or `LoadBalancer`, set this to `Local` to enable source IP preservation.
  ## @param service.ssh.externalIPs External IPs for service.
  ## @param service.ssh.ipFamilyPolicy SSH service dual-stack policy.
  ## @param service.ssh.ipFamilies SSH service dual-stack familiy selection,for dual-stack parameters see official kubernetes [dual-stack concept documentation](https://kubernetes.io/docs/concepts/services-networking/dual-stack/).
  ## @param service.ssh.hostPort HostPort for ssh service.
  ## @param service.ssh.loadBalancerSourceRanges Source range filter for ssh loadbalancer.
  ## @param service.ssh.annotations SSH service annotations.
  ## @param service.ssh.labels SSH service additional labels.
  ## @param service.ssh.loadBalancerClass Loadbalancer class.
  ssh:
    type: ClusterIP
    port: 22
    clusterIP: None
    loadBalancerIP:
    nodePort:
    externalTrafficPolicy:
    externalIPs:
    ipFamilyPolicy:
    ipFamilies:
    hostPort:
    loadBalancerSourceRanges: []
    annotations: {}
    labels: {}
    loadBalancerClass:


## @section ServiceAccount
serviceAccount:
  ## @param serviceAccount.enabled Assign the pod to use the ServiceAccount.
  enabled: true

  ## @param serviceAccount.existingServiceAccount.enabled Enable using an existing ServiceAccount.
  ## @param serviceAccount.existingServiceAccount.existingServiceAccountName Name of the existing ServiceAccount to use.
  existingServiceAccount:
    enabled: false
    existingServiceAccountName: ""

  ## @param serviceAccount.new.annotations Custom annotations for the ServiceAccount.
  ## @param serviceAccount.new.labels Custom labels for the ServiceAccount.
  ## @param serviceAccount.new.automountServiceAccountToken Enable/disable auto mounting of the service account token.
  ## @param serviceAccount.new.imagePullSecrets Image pull secrets, available to the ServiceAccount.
  new:
    annotations: {}
    labels: {}
    automountServiceAccountToken: false
    imagePullSecrets: []
    # - name: private-registry-access

## @section Persistence
persistence:
  ## @param persistence.enabled Enable persistent storage.
  enabled: false

  ## @param persistence.existingPersistentVolumeClaim.enabled Enable using an existing persistent volume claim.
  ## @param persistence.existingPersistentVolumeClaim.persistentVolumeClaimName Name of the existing persistent volume claim to use.
  existingPersistentVolumeClaim:
    enabled: false
    persistentVolumeClaimName: ""

  ## @param persistence.new.annotations.helm.sh/resource-policy Resource policy for the new persistent volume claim.
  ## @param persistence.new.labels Labels for the new persistent volume claim.
  ## @param persistence.new.accessModes AccessMode for the new persistent volume claim.
  ## @param persistence.new.persistentVolumeName Name of the persistent volume for the new persistent volume claim.
  ## @param persistence.new.size Size for the new persistent volume claim.
  ## @param persistence.new.storageClassName Name of the storage class to use for the new persistent volume claim.
  ## @param persistence.new.subPath Subdirectory of the volume to mount at for the new persistent volume claim.
  new:
    annotations:
      helm.sh/resource-policy: keep
    labels: {}
    accessModes:
      - ReadWriteOnce
    persistentVolumeName: ""
    size: 10Gi
    storageClassName: ""
    subPath: ""

## @param extraContainers Additional sidecar containers to run in the pod.
extraContainers: []
#  - name: sidecar-bob
#    image: busybox
#    command: [/bin/sh, -c, 'echo "Hello world"']

## @deprecated The preExtraInitContainers and postExtraInitContainers variables have been replaced by
## deployment.initContainers. Add an entry with a `container` key before or after the linked
## chart-managed init containers to achieve the same result.

## @param extraInitVolumeMounts Mounts that are only mapped into the init-containers. Can be used for additional preconfiguration.
extraInitVolumeMounts: []

## @deprecated The extraVolumeMounts variable has been split two:
## - deployment.gitea.volumeMounts
## - extraInitVolumeMounts
## As an example, can be used to mount a client cert when connecting to an external Postgres server.
## @param extraVolumeMounts **DEPRECATED** Additional volume mounts for init containers and the Gitea main container.
extraVolumeMounts: []
# - name: postgres-ssl-vol
#   readOnly: true
#   mountPath: "/pg-ssl"

## @section Init
## @param initPreScript Bash shell script copied verbatim to the start of the init-container.
initPreScript: ""
## @param initContainersScriptsVolumeMountPath Path to mount the scripts consumed from the Secrets.
initContainersScriptsVolumeMountPath: "/usr/sbinx"
#
# initPreScript: |
#   mkdir -p /data/git/.postgresql
#   cp /pg-ssl/* /data/git/.postgresql/
#   chown -R git:git /data/git/.postgresql/
#   chmod 400 /data/git/.postgresql/postgresql.key

## @param initContainers.resources.limits initContainers.limits Kubernetes resource limits for init containers.
## @param initContainers.resources.requests.cpu initContainers.requests.cpu Kubernetes cpu resource limits for init containers.
## @param initContainers.resources.requests.memory initContainers.requests.memory Kubernetes memory resource limits for init containers.
initContainers:
  resources:
    limits: {}
    requests:
      cpu: 100m
      memory: 128Mi

## @section Gitea
#
gitea:
  ## @param gitea.metrics.enabled Enable Gitea metrics.
  ## @param gitea.metrics.token used for `bearer` token authentication on metrics endpoint. If not specified or empty metrics endpoint is public.
  ## @param gitea.metrics.serviceMonitor.enabled Enable Gitea metrics service monitor. Requires, that `gitea.metrics.enabled` is also set to true, to enable metrics generally.
  ## @param gitea.metrics.serviceMonitor.interval Interval at which metrics should be scraped. If not specified Prometheus' global scrape interval is used.
  ## @param gitea.metrics.serviceMonitor.relabelings RelabelConfigs to apply to samples before scraping.
  ## @param gitea.metrics.serviceMonitor.scheme HTTP scheme to use for scraping. For example `http` or `https`. Default is http.
  ## @param gitea.metrics.serviceMonitor.scrapeTimeout Timeout after which the scrape is ended. If not specified, global Prometheus scrape timeout is used.
  ## @param gitea.metrics.serviceMonitor.tlsConfig TLS configuration to use when scraping the metric endpoint by Prometheus.
  metrics:
    enabled: false
    token:
    serviceMonitor:
      enabled: false
      #  additionalLabels:
      #    prometheus-release: prom1
      interval: ""
      relabelings: []
      scheme: ""
      scrapeTimeout: ""
      tlsConfig: {}

  ## @param gitea.ldap LDAP configuration.
  ldap: []
    # - name: "LDAP 1"
    #  existingSecret:
    #  securityProtocol:
    #  host:
    #  port:
    #  userSearchBase:
    #  userFilter:
    #  adminFilter:
    #  emailAttribute:
    #  bindDn:
    #  bindPassword:
    #  usernameAttribute:
    #  publicSSHKeyAttribute:

  # Either specify inline `key` and `secret` or refer to them via `existingSecret`
  ## @param gitea.oauth OAuth configuration.
  oauth: []
    # - name: 'OAuth 1'
    #   provider:
    #   key:
    #   secret:
    #   existingSecret:
    #   autoDiscoverUrl:
    #   useCustomUrls:
    #   customAuthUrl:
    #   customTokenUrl:
    #   customProfileUrl:
    #   customEmailUrl:

  ## @param gitea.config.server.SSH_PORT SSH port for rootlful Gitea image.
  ## @param gitea.config.server.SSH_LISTEN_PORT SSH port for rootless Gitea image.
  config:
    #  APP_NAME: "Gitea: Git with a cup of tea"
    #  RUN_MODE: dev
    server:
      SSH_PORT: 22 # rootful image
      SSH_LISTEN_PORT: 2222 # rootless image
  #
  #  security:
  #    PASSWORD_COMPLEXITY: spec

  ## @param gitea.additionalConfigSources Additional configuration from secret or configmap.
  additionalConfigSources: []
  #   - secret:
  #       secretName: gitea-app-ini-oauth
  #   - configMap:
  #       name: gitea-app-ini-plaintext

  ## @param gitea.additionalConfigFromEnvs Additional configuration sources from environment variables.
  additionalConfigFromEnvs: []

  ## @param gitea.extraEnvSourceFile Source environment variables from a file during init container startup. This is especially useful for reading environment variable files generated by the Vault agent-injector.
  ## See the sample annotations below for reference.
  ## podAnnotations:
  ##   vault.hashicorp.com/agent-inject: "true"
  ##   vault.hashicorp.com/agent-init-first: "true"
  ##   vault.hashicorp.com/agent-inject-secret-gitea: <path/to/secret>
  ##   vault.hashicorp.com/agent-inject-template-gitea: |
  ##     {{- with secret "path/to/secret" -}}
  ##     export GITEA__database__HOST="{{ .Data.data.db_host }}"
  ##     export GITEA__database__NAME="{{ .Data.data.db_name }}"
  ##     export GITEA__database__USER="{{ .Data.data.db_user }}"
  ##     export GITEA__database__PASSWD="{{ .Data.data.db_password }}"
  ##     export GITEA__queue__CONN_STR="{{ .Data.data.kv_conn_string }}"
  ##     export GITEA__session__PROVIDER_CONFIG="{{ .Data.data.kv_conn_string }}"
  ##     export GITEA__cache__HOST="{{ .Data.data.kv_conn_string }}"
  ##     export GITEA_ADMIN_USERNAME="{{ .Data.data.gitea_admin_user }}"
  ##     export GITEA_ADMIN_PASSWORD="{{ .Data.data.gitea_admin_password }}"
  ##     {{- end }}

  # extraEnvSourceFile: /vault/secrets/gitea
  extraEnvSourceFile:

  ## @param gitea.podAnnotations Annotations for the Gitea pod.
  podAnnotations: {}

  ## @param gitea.ssh.logLevel Configure OpenSSH's log level. Only available for root-based Gitea image.
  ssh:
    logLevel: "INFO"

  ## @section LivenessProbe
  #
  ## @param gitea.livenessProbe.enabled Enable liveness probe.
  ## @param gitea.livenessProbe.tcpSocket.port Port to probe for liveness.
  ## @param gitea.livenessProbe.initialDelaySeconds Initial delay before liveness probe is initiated.
  ## @param gitea.livenessProbe.timeoutSeconds Timeout for liveness probe.
  ## @param gitea.livenessProbe.periodSeconds Period for liveness probe.
  ## @param gitea.livenessProbe.successThreshold Success threshold for liveness probe.
  ## @param gitea.livenessProbe.failureThreshold Failure threshold for liveness probe.
  # Modify the liveness probe for your needs or completely disable it by commenting out.
  livenessProbe:
    enabled: true
    tcpSocket:
      port: http
    initialDelaySeconds: 200
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 10

  ## @section ReadinessProbe
  #
  ## @param gitea.readinessProbe.enabled Enable readiness probe.
  ## @param gitea.readinessProbe.tcpSocket.port Port to probe for readiness.
  ## @param gitea.readinessProbe.initialDelaySeconds Initial delay before readiness probe is initiated.
  ## @param gitea.readinessProbe.timeoutSeconds Timeout for readiness probe.
  ## @param gitea.readinessProbe.periodSeconds Period for readiness probe.
  ## @param gitea.readinessProbe.successThreshold Success threshold for readiness probe.
  ## @param gitea.readinessProbe.failureThreshold Failure threshold for readiness probe.
  # Modify the readiness probe for your needs or completely disable it by commenting out.
  readinessProbe:
    enabled: true
    tcpSocket:
      port: http
    initialDelaySeconds: 5
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 3

  # # Uncomment the startup probe to enable and modify it for your needs.
  ## @section StartupProbe
  #
  ## @param gitea.startupProbe.enabled Enable startup probe.
  ## @param gitea.startupProbe.tcpSocket.port Port to probe for startup.
  ## @param gitea.startupProbe.initialDelaySeconds Initial delay before startup probe is initiated.
  ## @param gitea.startupProbe.timeoutSeconds Timeout for startup probe.
  ## @param gitea.startupProbe.periodSeconds Period for startup probe.
  ## @param gitea.startupProbe.successThreshold Success threshold for startup probe.
  ## @param gitea.startupProbe.failureThreshold Failure threshold for startup probe.
  startupProbe:
    enabled: false
    tcpSocket:
      port: http
    initialDelaySeconds: 60
    timeoutSeconds: 1
    periodSeconds: 10
    successThreshold: 1
    failureThreshold: 10

## @section valkey
valkey:
  ## @param valkey.enabled Enable valkey standalone or replicated.
  enabled: false

  ## @param valkey.image.registry Image registry.
  ## @param valkey.image.repository Image repository.
  ## @param valkey.image.tag Image tag.
  image:
    registry: docker.io
    repository: valkey/valkey
    tag: ""

  ## @param valkey.auth.enabled Enable ACL-based authentication.
  ## @param valkey.auth.aclUsers.default.permissions ACL permissions for the default user.
  ## @param valkey.auth.aclUsers.default.password Password for the default user.
  auth:
    enabled: true
    aclUsers:
      default:
        permissions: "~* &* +@all"
        password: changeme

  ## @param valkey.service.port Port of Valkey service.
  service:
    port: 6379

  ## @param valkey.dataStorage.enabled Enable persistence using Persistent Volume Claims.
  ## @param valkey.dataStorage.className Persistent Volume storage class.
  ## @param valkey.dataStorage.requestedSize Persistent Volume size.
  dataStorage:
    enabled: false
    className: ""
    requestedSize: 8Gi

  ## @param valkey.replica.enabled Enable replication.
  ## @param valkey.replica.replicas Number of Valkey replica instances to deploy.
  ## @param valkey.replica.persistence.size Persistent Volume size for replicas.
  ## @param valkey.replica.persistence.storageClass Persistent Volume storage class for replicas.
  replica:
    enabled: false
    replicas: 3
    persistence:
      size: 8Gi
      storageClass: ""

  ## @param valkey.metrics.enabled Enable Prometheus exporter sidecar.
  ## @param valkey.metrics.exporter.image.registry Image registry.
  ## @param valkey.metrics.exporter.image.repository Image repository.
  ## @param valkey.metrics.exporter.image.tag Image tag.
  metrics:
    enabled: false
    exporter:
      image:
        registry: ghcr.io
        repository: oliver006/redis_exporter
        tag: ""

## @section PostgreSQL HA
postgresql-ha:
  ## @param postgresql-ha.enabled Enable PostgreSQL HA.
  enabled: true

  ## @param postgresql-ha.global.postgresql.database Name for a custom database to create (overrides `auth.database`).
  ## @param postgresql-ha.global.postgresql.username Name for a custom user to create (overrides `auth.username`).
  ## @param postgresql-ha.global.postgresql.password Name for a custom password to create (overrides `auth.password`).
  global:
    postgresql:
      database: gitea
      password: gitea
      username: gitea

  ## @param postgresql-ha.metrics.image.repository Image repository, eg. `bitnamilegacy/postgres-exporter`.
  metrics:
    image:
      repository: bitnamilegacy/postgres-exporter

  ## @param postgresql-ha.postgresql.image.repository Image repository, eg. `bitnamilegacy/postgresql-repmgr`.
  ## @param postgresql-ha.postgresql.repmgrPassword Repmgr Password.
  ## @param postgresql-ha.postgresql.postgresPassword postgres Password.
  ## @param postgresql-ha.postgresql.password Password for the `gitea` user (overrides `auth.password`).
  postgresql:
    image:
      repository: bitnamilegacy/postgresql-repmgr
    repmgrPassword: changeme2
    postgresPassword: changeme1
    password: changeme4

  ## @param postgresql-ha.pgpool.adminPassword pgpool adminPassword.
  ## @param postgresql-ha.pgpool.image.repository Image repository, eg. `bitnamilegacy/pgpool`.
  ## @param postgresql-ha.pgpool.srCheckPassword pgpool srCheckPassword.
  pgpool:
    adminPassword: changeme3
    image:
      repository: bitnamilegacy/pgpool
    srCheckPassword: changeme4

  ## @param postgresql-ha.service.ports.postgresql PostgreSQL service port (overrides `service.ports.postgresql`).
  service:
    ports:
      postgresql: 5432

  ## @param postgresql-ha.persistence.enabled Enable persistence.
  ## @param postgresql-ha.persistence.storageClass Persistent Volume Storage Class.
  ## @param postgresql-ha.persistence.size PVC Storage Request for PostgreSQL HA volume.
  persistence:
    enabled: true
    storageClass: ""
    size: 10Gi

  ## @param postgresql-ha.volumePermissions.image.repository Image repository, eg. `bitnamilegacy/os-shell`.
  volumePermissions:
    image:
      repository: bitnamilegacy/os-shell

## @section PostgreSQL
postgresql:
  ## @param postgresql.enabled Enable PostgreSQL.
  enabled: false

  ## @param postgresql.global.postgresql.auth.password Password for the `gitea` user (overrides `auth.password`).
  ## @param postgresql.global.postgresql.auth.database Name for a custom database to create (overrides `auth.database`).
  ## @param postgresql.global.postgresql.auth.username Name for a custom user to create (overrides `auth.username`).
  ## @param postgresql.global.postgresql.service.ports.postgresql PostgreSQL service port (overrides `service.ports.postgresql`).
  global:
    postgresql:
      auth:
        password: gitea
        database: gitea
        username: gitea
      service:
        ports:
          postgresql: 5432

  ## @param postgresql.image.repository Image repository, eg. `bitnamilegacy/postgresql`.
  image:
    repository: bitnamilegacy/postgresql

  primary:
    ## @param postgresql.primary.persistence.enabled Enable persistence.
    ## @param postgresql.primary.persistence.storageClass Persistent Volume storage class.
    ## @param postgresql.primary.persistence.size PVC Storage Request for PostgreSQL volume.
    persistence:
      enabled: true
      storageClass: ""
      size: 10Gi

  readReplicas:
    ## @param postgresql.readReplicas.persistence.enabled Enable PostgreSQL read only data persistence using PVC.
    ## @param postgresql.readReplicas.persistence.storageClass Persistent Volume storage class.
    ## @param postgresql.readReplicas.persistence.size PVC Storage Request for PostgreSQL volume.
    persistence:
      enabled: true
      storageClass: ""
      size: ""

  ## @param postgresql.metrics.image.repository Image repository, eg. `bitnamilegacy/postgres-exporter`.
  metrics:
    image:
      repository: bitnamilegacy/postgres-exporter

  ## @param postgresql.volumePermissions.image.repository Image repository, eg. `bitnamilegacy/os-shell`.
  volumePermissions:
    image:
      repository: bitnamilegacy/os-shell

# By default, removed or moved settings that still remain in a user defined values.yaml will cause Helm to fail running the install/update.
# Set it to false to skip this basic validation check.
## @section Advanced
## @param checkDeprecation Set it to false to skip this basic validation check.
## @param test.enabled Set it to false to disable test-connection Pod.
## @param test.image.name Image name for the wget container used in the test-connection Pod.
## @param test.image.tag Image tag for the wget container used in the test-connection Pod.
checkDeprecation: true
test:
  enabled: true
  image:
    name: busybox
    tag: latest

## @param extraDeploy Array of extra objects to deploy with the release.
##
extraDeploy: []