# Forgejo Helm Values — Single Source of Truth
# Chart: https://codeberg.org/forgejo-contrib/forgejo-helm

gitea:
  admin:
    username: "admin"
    email: "admin@riotpiao.com"
    # Password set via secret (not in values)

  config:
    server:
      DOMAIN: forgejo.riotpiao.com
      ROOT_URL: https://forgejo.riotpiao.com
      SSH_DOMAIN: forgejo.riotpiao.com
      SSH_PORT: 22
      
    database:
      DB_TYPE: postgres
      HOST: forgejo-db-rw.forgejo.svc.cluster.local:5432
      NAME: forgejo
      # User/password from CNPG-generated secret
      USER:
        valueFrom:
          secretKeyRef:
            name: forgejo-db-app
            key: username
      PASSWD:
        valueFrom:
          secretKeyRef:
            name: forgejo-db-app
            key: password
      
    cache:
      ADAPTER: redis
      HOST: redis://forgejo-redis.forgejo.svc.cluster.local:6379/0
      
    session:
      PROVIDER: redis
      PROVIDER_CONFIG: redis://forgejo-redis.forgejo.svc.cluster.local:6379/1
      
    queue:
      TYPE: redis
      CONN_STR: redis://forgejo-redis.forgejo.svc.cluster.local:6379/2

# Persistence (shared storage for repos)
persistence:
  enabled: true
  storageClass: longhorn
  size: 20Gi
  accessModes:
    - ReadWriteOnce

# Ingress
ingress:
  enabled: true
  className: nginx
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
  hosts:
    - host: forgejo.riotpiao.com
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: forgejo-tls
      hosts:
        - forgejo.riotpiao.com

# Resources
resources:
  requests:
    cpu: 200m
    memory: 512Mi
  limits:
    cpu: 1000m
    memory: 2Gi

# Tolerations for control-plane
tolerations:
  - key: node-role.kubernetes.io/control-plane
    operator: Exists
    effect: NoSchedule

# ArgoCD adoption labels
labels:
  argocd.argoproj.io/instance: forgejo