# Default values for prometheus-fail2ban-exporter.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

## @param nameOverride Individual release name suffix.
## @param fullnameOverride Override the complete release name logic.
nameOverride: ""
fullnameOverride: ""

## @section Affinity
## @param affinity Affinity for the fail2ban-exporter deployment.
affinity: {}

## @section Configuration
## @skip config Skip individual fail2ban exporter configuration.
config: {}
  # F2B_COLLECTOR_SOCKET
  # Path to the fail2ban socket inside the container filesystem.
  # F2B_COLLECTOR_SOCKET: ""

  # F2B_COLLECTOR_TEXT_PATH
  # Directory to read text files with metrics from.
  # F2B_COLLECTOR_TEXT_PATH: ""

  # F2B_EXIT_ON_SOCKET_CONN_ERROR
  # When set to true the exporter will immediately exit on a fail2ban socket connection error.
  # F2B_EXIT_ON_SOCKET_CONN_ERROR: ""

  # F2B_WEB_BASICAUTH_PASS
  # Basic auth password to access the metrics endpoint.
  # F2B_WEB_BASICAUTH_PASS: ""

  # F2B_WEB_BASICAUTH_USER
  # Basic auth user to access the metrics endpoint.
  # F2B_WEB_BASICAUTH_USER:""

  # F2B_WEB_LISTEN_ADDRESS
  # Alternative listen address instead of 0.0.0.0/0 and ::/0.
  # F2B_WEB_LISTEN_ADDRESS: ""

## @section Image
## @param image.repository Image repository, eg. `library/busybox`.
## @param image.pullPolicy Image pull policy.
## @param image.tag Custom image tag, eg. `0.1.0`. Defaults to `appVersion`.
image:
  repository: git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter
  pullPolicy: Always
  # Overrides the image tag whose default is the chart appVersion.
  tag: ""

## @param imagePullSecrets Secret to use for pulling the image.
imagePullSecrets: []

## @section Ingress
## @skip ingress Skip individual ingress configuration.
ingress:
  enabled: false
  className: "nginx"
  annotations:
    # cert-manager.io/cluster-issuer:
    # cert-manager.io/issuer:
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
  - host: "your-hostname"
    paths:
    - path: /
      pathType: ImplementationSpecific
  tls:
  - secretName: "your-tls-secret"
    hosts:
    - "your-hostname"

## @section NodeSelector
## @skip nodeSelector Skip individual nodeSelector configuration.
nodeSelector: {}

## @section PodAnnotations
## @skip podAnnotations Skip individual podAnnotations configuration.
podAnnotations: {}

## @section PodPriorityClassName
## @skip podPriorityClassName Skip individual podPriorityClassName configuration.
podPriorityClassName: ""

## @section PodSecurityContext
## @skip podSecurityContext Skip individual PodSecurityContext configuration.
podSecurityContext: {}
  # fsGroup: 2000

## @section Resources
## @skip resources Skip individual resource configuration.
resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

## @section SecurityContext
## @skip securityContext Skip individual securityContext configuration.
securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

## @section Service
## @skip service Skip individual service configuration.
service:
  type: ClusterIP
  port: 9191

## @section ServiceMonitor
## @skip serviceMonitor Skip individual serviceMonitor configuration.
serviceMonitor:
  enabled: false
  annotations: {}
  honorLabels: false
  interval: 60s
  path: /metrics
  scheme: http
  scrapeTimeout: 30s
  tlsConfig:
    insecureSkipVerify: false

## @section Tolerations
## @skip tolerations Skip individual tolerations configuration.
tolerations: []

## @section VolumeMounts
## @skip volumeMounts Skip individual volumeMounts configuration.
volumeMounts:
- name: socket
  mountPath: /var/run/fail2ban/fail2ban.sock

## @section Volume
## @skip volumes Skip individual volume configuration.
volumes:
- name: socket
  hostPath:
    path: /var/run/fail2ban/fail2ban.sock
    type: Socket