# An example environment. Copy to your environment repository's
# cluster/copier-answers.yml on the first render (task render:first), then
# change values there and run `task render` (copier update).
argocd:
  namespace: argocd
  project: default
  destination_server: https://kubernetes.default.svc
  # The environment repository Argo CD reads (this template renders into it).
  repo_url: https://git.example.com/you/archify-sync-gitops.git
  target_revision: HEAD

archify_sync:
  is_enabled: true
  namespace: archify-sync
  # The Helm chart lives in the server repository.
  chart_repo: https://gitea.lego-cloud.eu/vscode-extensions/archify-vscode-ext-sync.git
  chart_path: charts/archify-sync
  chart_revision: main
  image:
    # Built from the server repository's Dockerfile and pushed to your registry.
    repository: registry.example.com/archify-sync
    tag: "0.1.4"
    # For a private registry: the name of an image pull Secret in the namespace.
    # pull_secret: archify-sync-image-pull
  host: archify.example.com
  ingress_class: nginx
  database:
    size: 8Gi
    # The cluster's default storage class when unset. It must keep file owners:
    # PostgreSQL refuses a data directory that maps every user to root.
    # storage_class: standard
    # Or a static NFS volume, an export owned by uid 70, mode 0700:
    # nfs_server: 10.0.0.10
    # nfs_path: /exports/archify-sync-database
  oidc:
    is_enabled: true
    issuer: https://sso.example.com/realms/home
    client_id: archify-sync
    label: Keycloak
    allowed_groups: [archify-users]
    admin_groups: [archify-admins]
  members_can_invite: false
  metrics:
    is_enabled: true
    service_monitor: false
  # Without external_secrets, create Secret archify-sync-secrets yourself (see
  # README). With External Secrets installed, name the store and its entries:
  # external_secrets:
  #   store: vault
  #   store_kind: ClusterSecretStore
  #   postgres_password_key: archify-sync-postgres-password
  #   oidc_client_secret_key: archify-sync-oidc-client-secret
  #   # And the image pull secret for a private registry (needs image.pull_secret):
  #   image_pull:
  #     registry: registry.example.com
  #     username: archify-pull
  #     password_key: archify-sync-registry-password