# Homarr landing page — official chart from homarr-labs/charts.
# SSO via Authentik, single-replica (UI state lives on PVC, not git).
image:
  repository: ghcr.io/homarr-labs/homarr
  tag: "1.0.0"  # Pin to stable
  pullPolicy: IfNotPresent

replicaCount: 1

service:
  type: ClusterIP
  port: 3000

persistence:
  enabled: true
  storageClass: longhorn-wffc
  accessMode: ReadWriteOnce
  size: 5Gi

# ENV injected via secret (k8s/applications/homarr/homarr-secrets.enc.yaml)
# Contains:
#   - AUTH_PROVIDERS, AUTH_OIDC_*, NEXTAUTH_URL, BASE_URL
#   - SECRET_ENCRYPTION_KEY
# Chart doesn't support envFrom, so we'll disable custom env for now
# and manually add it via kubectl patch after initial deployment

tolerations:
  - key: node-role.kubernetes.io/control-plane
    operator: Exists
    effect: NoSchedule

resources:
  requests:
    cpu: 100m
    memory: 256Mi
  limits:
    cpu: 500m
    memory: 512Mi

ingress:
  enabled: false  # Managed centrally in k8s/bootstrap/ingress/ingress.yaml