replicaCount: 1

image:
  registry: docker.io
  repository: woodpeckerci/woodpecker-server
  pullPolicy: Always
  # Overrides the image tag whose default is the chart appVersion.
  tag: "next"

env:
  WOODPECKER_OPEN: "false"
  WOODPECKER_ADMIN: "Nold360"
  WOODPECKER_HOST: https://ci.nold.in
  WOODPECKER_GITHUB: "true"
  #WOODPECKER_REPO_OWNERS: "nold360"

  HTTP_PROXY: http://proxy-squid.proxy.svc.cluster.local:3128
  HTTPS_PROXY: http://proxy-squid.proxy.svc.cluster.local:3128
  http_proxy: http://proxy-squid.proxy.svc.cluster.local:3128
  https_proxy: http://proxy-squid.proxy.svc.cluster.local:3128
  NO_PROXY: localhost,.cluster.local
  no_proxy: localhost,.cluster.local


extraSecretNamesForEnvFrom:
- github-oauth
- woodpecker-secret

persistentVolume:
  enabled: true
  size: 10Gi
  mountPath: "/var/lib/woodpecker"
  storageClass: "local-path"

podAnnotations: {}

podSecurityContext:
  fsGroup: 2000

securityContext:
  capabilities:
    drop:
    - ALL
  readOnlyRootFilesystem: true
  runAsNonRoot: true
  runAsUser: 1000

service:
  type: ClusterIP
  port: 80

ingress:
  enabled: true
  ingressClassName: ingress-external-traefik
  labels:
    environment: external
  annotations:
    kubernetes.io/tls-acme: "true"
    kubernetes.io/ingress.class: ingress-external
    traefik.ingress.kubernetes.io/router.tls: 'true'
    cert-manager.io/cluster-issuer: letsencrypt
    external-dns.alpha.kubernetes.io/hostname: ci.nold.in
    external-dns.alpha.kubernetes.io/target: nold.in
  hosts:
    - host: ci.nold.in
      paths:
      - path: /
        backend:
          serviceName: server
          servicePort: 80
  tls:
    - secretName: ci-nold-in-tls
      hosts:
        - ci.nold.in

resources:
  limits:
    cpu: 500m
    memory: 512Mi
  requests:
    cpu: 100m
    memory: 128Mi