ingressClass:
  enabled: true
  isDefaultClass: false

providers:
  kubernetesCRD:
    enabled: true
    #ingressClass: external

  kubernetesIngress:
    labelSelector: environment=external
    ingressClass: ingress-external
    namespaces:
    - ingress-external
    - nextcloud
    - gitea
    - woodpecker

    publishedService:
      enabled: true

ports:
  web:
    redirectTo: websecure
  websecure:
    tls:
      enabled: true

globalArguments: []
  #additionalArguments:
  #- "--providers.kubernetesingress.ingressclass=ingress-external"

ingressRoute:
  dashboard:
    enabled: false

tlsOptions:
  default:
    preferServerCipherSuites: true
    minVersion: VersionTLS12
    sniStrict: true
    cipherSuites:
      - TLS_AES_128_GCM_SHA256
      - TLS_AES_256_GCM_SHA384
      - TLS_CHACHA20_POLY1305_SHA256
      - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
      - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

persistence:
  enabled: true

service:
  enabled: true
  type: LoadBalancer
  annotations:
    metallb.universe.tf/address-pool: external
  externalIPs:
  - 192.168.1.12

logs:
  general:
    level: INFO