# Default values for ntfy.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: binwiederhier/ntfy
  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
  tag: "v2.11.0"

imagePullSecrets: []
nameOverride: ""
fullnameOverride: ""

serviceAccount:
  # Specifies whether a service account should be created
  create: true
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

podAnnotations: {}

podSecurityContext: {}
  # fsGroup: 2000

securityContext: {}
  # capabilities:
  #   drop:
  #   - ALL
  # readOnlyRootFilesystem: true
  # runAsNonRoot: true
  # runAsUser: 1000

service:
  type: ClusterIP
  port: 80

ingress:
  enabled: true
  className: ""
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: ntfy.james-mellors.com
      paths:
        - path: /
          pathType: ImplementationSpecific
  tls: 
   - secretName: ntfy-tls
     hosts:
       - ntfy.james-mellors.com

resources: {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #   cpu: 100m
  #   memory: 128Mi
  # requests:
  #   cpu: 100m
  #   memory: 128Mi

autoscaling:
  enabled: false
  minReplicas: 1
  maxReplicas: 100
  targetCPUUtilizationPercentage: 80
  # targetMemoryUtilizationPercentage: 80


config:
  enabled: true
  data:
    base-url: "https://ntfy.james-mellors.com"
    auth-file: "/var/cache/ntfy/user.db"
    auth-default-access: "deny-all"
    cache-file: "/var/cache/ntfy/cache.db"
    attachment-cache-dir: "/var/cache/ntfy/attachments"
    behind-proxy: true


nodeSelector: {}

tolerations: []

affinity: {}

persistence:
  enabled: false
  size: 200Mi

istio:
  gateway:
    # -- Extra labels for the Istio Gateway
    extraLabels: {}
    # -- Extra annotations for the Istio Gateway
    annotations: {}
    # -- Selector for the Istio Ingress Gateway pods
    selector:
      istio: ingressgateway
    # -- Enable automatic HTTP to HTTPS redirection on Gateway
    httpRedirect: true
  virtualService:
    # -- Extra labels for the Istio VirtualService
    extraLabels: {}
    # -- Extra annotations for the Istio VirtualService
    annotations: {}

# -- Cert-Manager Configuration
certManager:
  # -- Enable automatic Certificate creation via cert-manager
  enabled: true # Set to true to create Certificate resource

  # -- Reference to the cert-manager Issuer or ClusterIssuer
  issuer:
    # -- Name of the Issuer or ClusterIssuer (REQUIRED if enabled)
    name: "letsencrypt-cloudflare" # e.g., "letsencrypt-prod"
    # -- Kind of the issuer (Issuer or ClusterIssuer) (REQUIRED if enabled)
    kind: ClusterIssuer # Or "Issuer"

  # -- Optional: Add extra labels/annotations to the Certificate resource
  certificate:
    extraLabels: {}
    annotations: {}