Archify Sync GitOps template

A Copier template for deploying Archify Sync with Argo CD: an app-of-apps,
the server's Helm chart and its values, optional secrets through External
Secrets and an optional static NFS volume for PostgreSQL.

copier-answers.example.yml

@@ -0,0 +1,57 @@
+# An example environment. Copy to your environment repository's
+# cluster/copier-answers.yml on the first render (task render:first), then
+# change values there and run `task render` (copier update).
+argocd:
+  namespace: argocd
+  project: default
+  destination_server: https://kubernetes.default.svc
+  # The environment repository Argo CD reads (this template renders into it).
+  repo_url: https://git.example.com/you/archify-sync-gitops.git
+  target_revision: HEAD
+
+archify_sync:
+  is_enabled: true
+  namespace: archify-sync
+  # The Helm chart lives in the server repository.
+  chart_repo: https://gitea.lego-cloud.eu/vscode-extensions/archify-vscode-ext-sync.git
+  chart_path: charts/archify-sync
+  chart_revision: main
+  image:
+    # Built from the server repository's Dockerfile and pushed to your registry.
+    repository: registry.example.com/archify-sync
+    tag: "0.1.4"
+    # For a private registry: the name of an image pull Secret in the namespace.
+    # pull_secret: archify-sync-image-pull
+  host: archify.example.com
+  ingress_class: nginx
+  database:
+    size: 8Gi
+    # The cluster's default storage class when unset. It must keep file owners:
+    # PostgreSQL refuses a data directory that maps every user to root.
+    # storage_class: standard
+    # Or a static NFS volume, an export owned by uid 70, mode 0700:
+    # nfs_server: 10.0.0.10
+    # nfs_path: /exports/archify-sync-database
+  oidc:
+    is_enabled: true
+    issuer: https://sso.example.com/realms/home
+    client_id: archify-sync
+    label: Keycloak
+    allowed_groups: [archify-users]
+    admin_groups: [archify-admins]
+  members_can_invite: false
+  metrics:
+    is_enabled: true
+    service_monitor: false
+  # Without external_secrets, create Secret archify-sync-secrets yourself (see
+  # README). With External Secrets installed, name the store and its entries:
+  # external_secrets:
+  #   store: vault
+  #   store_kind: ClusterSecretStore
+  #   postgres_password_key: archify-sync-postgres-password
+  #   oidc_client_secret_key: archify-sync-oidc-client-secret
+  #   # And the image pull secret for a private registry (needs image.pull_secret):
+  #   image_pull:
+  #     registry: registry.example.com
+  #     username: archify-pull
+  #     password_key: archify-sync-registry-password