ingress:
  main:
    enabled: true
    annotations:
      cert-manager.io/cluster-issuer: "vault-issuer"
      traefik.ingress.kubernetes.io/router.tls: 'true'
      #FIXME:
      nginx.ingress.kubernetes.io/proxy-body-size: 50m

    hosts:
      - host: torrent.dc
        paths:
          - path: /
            pathType: Prefix

    tls:
      - secretName: torrent.dc-tls
        hosts:
          - torrent.dc

env:
  PUID: 1000
  GUID: 1000

persistence:
  config:
    enabled: true
    mountPath: /config
    size: 10M

  # use hostpath instead
  downloads:
    enabled: true
    type: hostPath
    hostPath: /data/torrent
    mountPath: /downloads

## VPN
addons:
  vpn:
    enabled: true

    openvpn:
      authSecret: openvpn
    configFileSecret: openvpn

    securityContext:
      capabilities:
        add:
          - NET_ADMIN
          - SYS_MODULE

    livenessProbe:
      exec:
        command:
          - sh
          - -c
          - if [ $(curl -s https://ipinfo.io/country) == 'NL' ]; then exit 0; else exit $?; fi
      initialDelaySeconds: 30
      periodSeconds: 60
      failureThreshold: 3