opengist.yaml

---
# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s/helm-charts/common-3.0.1/charts/library/common/values.schema.json
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: opengist
  namespace: development
spec:
  releaseName: opengist
  interval: 15m
  chart:
    spec:
      # renovate: registryUrl=https://bjw-s.github.io/helm-charts
      chart: app-template
      version: 3.6.0
      interval: 15m
      sourceRef:
        kind: HelmRepository
        name: bjw-s-helm-charts
        namespace: flux-system
  values:
    controllers:
      main:
        strategy: Recreate
        containers:
          main:
            image:
              repository: ghcr.io/thomiceli/opengist
              pullPolicy: IfNotPresent
              tag: 1.8.4@sha256:c385001a3efdebe03f075a38145890d234412bd5a879ff04f5f39a033bdd8eac
            env:
              TZ: America/Chicago
              UID: 1000
              GID: 1000
              OG_CUSTOM_LOGO: "logo.png"
              OG_CUSTOM_FAVICON: "logo-32.png"
              OG_EXTERNAL_URL: "https://gist.${SECRET_DOMAIN}"
              OG_GITEA_CLIENT_KEY: "${SECRET_OPENGIST_GITEA_CLIENT_KEY}"
              OG_GITEA_SECRET: "${SECRET_OPENGIST_GITEA_SECRET}"
              OG_GITEA_URL: "https://git.${SECRET_DOMAIN}/"
              OG_GITEA_NAME: "The Homelab Git"
              OG_SSH_GIT_ENABLED: "false"
            resources:
              requests:
                cpu: 100m
                memory: 128Mi
              limits:
                memory: 256Mi
    defaultPodOptions:
      securityContext:
        fsGroup: 1000
        fsGroupChangePolicy: "Always"
    service:
      main:
        controller: main
        ports:
          http:
            port: 6157
    ingress:
      main:
        enabled: true
        annotations:
          kubernetes.io/tls-acme: "true"
          cert-manager.io/cluster-issuer: letsencrypt-prod
          nginx.ingress.kubernetes.io/custom-http-errors: "418"
        hosts:
          - host: gist.${SECRET_DOMAIN}
            paths:
              - path: /
                pathType: Prefix
                service:
                  identifier: main
                  port: http
        className: nginx-external
    persistence:
      data:
        enabled: true
        existingClaim: opengist-data-pvc
        globalMounts:
          - path: /opengist