image:
  repository: tccr.io/truecharts/ntfy
  tag: 1.28.0

extraArgs: ["serve"]

securityContext:
  readOnlyRootFilesystem: false
  runAsNonRoot: true

podSecurityContext:
  runAsUser: 1000
  runAsGroup: 1000
  fsGroup: 1000

env:
  NTFY_LISTEN_HTTP: ":{{ .Values.service.main.ports.main.port }}"
  # User Defined
  NTFY_BASE_URL: "https://notify.dc"
  NTFY_BEHIND_PROXY: false
  ENABLE_FIREBASE_FILE: false
  ENABLE_CACHE_FILE: false
  ENABLE_ATTACHMENT_CACHE_DIR: false
  ENABLE_AUTH_FILE: false
  # NTFY_CACHE_DURATION: "12h"
  # NTFY_KEEPALIVE_INTERVAL: "45s"
  # NTFY_MANAGER_INTERVAL: "1m"
  # NTFY_GLOBAL_TOPIC_LIMIT: 15000
  # NTFY_VISITOR_SUBSCRIPTION_LIMIT: 30
  # NTFY_VISITOR_ATTACHMENT_TOTAL_SIZE_LIMIT: "100M"
  # NTFY_VISITOR_ATTACHMENT_DAILY_BANDWIDTH_LIMIT: "500M"
  # NTFY_VISITOR_REQUEST_LIMIT_BURST: 60
  # NTFY_VISITOR_REQUEST_LIMIT_REPLENISH: "5s"
  # NTFY_VISITOR_REQUEST_LIMIT_EXEMPT_HOSTS: ""
  # NTFY_VISITOR_EMAIL_LIMIT_BURST: 16
  # NTFY_VISITOR_EMAIL_LIMIT_REPLENISH: "1h"
  # NTFY_ATTACHMENT_TOTAL_SIZE_LIMIT: "5G"
  # NTFY_ATTACHMENT_FILE_SIZE_LIMIT: "15M"
  # NTFY_ATTACHMENT_EXPIRY_DURATION: "3h"
  # NTFY_AUTH_DEFAULT_ACCESS: "read-write"
  # NTFY_SMTP_SENDER_ADDR: ""
  # NTFY_SMTP_SENDER_USER: ""
  # NTFY_SMTP_SENDER_PASS: ""
  # NTFY_SMTP_SENDER_FROM: ""
  # NTFY_SMTP_SERVER_LISTEN: ""
  # NTFY_SMTP_SERVER_DOMAIN: ""
  # NTFY_SMTP_SERVER_ADDR_PREFIX: ""

envFrom:
  - configMapRef:
      name: '{{ include "tc.common.names.fullname" . }}-ntfy'

service:
  main:
    ports:
      main:
        port: 10222

ingress:
  main:
    enabled: true
    enableFixedMiddlewares: false
    annotations:
      cert-manager.io/cluster-issuer: vault-issuer
      traefik.ingress.kubernetes.io/router.tls: 'true'
    hosts:
    - host: notify.dc
      paths:
      - path: /
        pathType: Prefix
    tls:
    - secretName: notify-tls
      hosts:
      - notify.dc

persistence:
  config:
    enabled: true
    mountPath: "/etc/ntfy"
  cache:
    enabled: true
    mountPath: "/var/cache/ntfy"

configmap:
  ntfy:
    enabled: true
    data:
      # If a path is set, it enables this options. To disable set to emtpy path
      NTFY_ATTACHMENT_CACHE_DIR: '{{ ternary "/var/cache/ntfy/attachments" "" .Values.env.ENABLE_ATTACHMENT_CACHE_DIR }}'
      NTFY_CACHE_FILE: '{{ ternary "/var/cache/ntfy/cache.db" "" .Values.env.ENABLE_CACHE_FILE }}'
      NTFY_AUTH_FILE: '{{ ternary "/etc/ntfy/user.db" "" .Values.env.ENABLE_AUTH_FILE }}'
      NTFY_FIREBASE_KEY_FILE: '{{ ternary "/etc/ntfy/firebase-key.json" "" .Values.env.ENABLE_FIREBASE_FILE }}'

portal:
  enabled: false