# Base Ory Kratos Helm values.
# DOMAIN_SUFFIX is replaced by overlay patches (sunbeam.pt / <LIMA_IP>.sslip.io).
# DSN and SMTP credentials come from the overlay-specific Secret.

kratos:
  config:
    version: v0.13.0

    dsn: "postgresql://kratos:$(KRATOS_DB_PASSWORD)@postgres-rw.data.svc.cluster.local:5432/kratos_db"

    selfservice:
      default_browser_return_url: https://auth.DOMAIN_SUFFIX/
      allowed_return_urls:
        - https://auth.DOMAIN_SUFFIX/
        - https://docs.DOMAIN_SUFFIX/
        - https://meet.DOMAIN_SUFFIX/
        - https://drive.DOMAIN_SUFFIX/
        - https://mail.DOMAIN_SUFFIX/
        - https://chat.DOMAIN_SUFFIX/
        - https://people.DOMAIN_SUFFIX/
        - https://src.DOMAIN_SUFFIX/
      flows:
        login:
          ui_url: https://auth.DOMAIN_SUFFIX/login
        registration:
          ui_url: https://auth.DOMAIN_SUFFIX/registration
        recovery:
          ui_url: https://auth.DOMAIN_SUFFIX/recovery
        settings:
          ui_url: https://auth.DOMAIN_SUFFIX/settings

    identity:
      default_schema_id: default
      schemas:
        - id: default
          url: file:///etc/config/kratos/identity.schema.json

    courier:
      smtp:
        connection_uri: "smtp://$(SMTP_USER):$(SMTP_PASSWORD)@localhost:25/"
        from_address: no-reply@DOMAIN_SUFFIX
        from_name: Sunbeam

    serve:
      public:
        base_url: https://auth.DOMAIN_SUFFIX/kratos/
        cors:
          enabled: true
          allowed_origins:
            - https://*.DOMAIN_SUFFIX
      admin:
        base_url: http://kratos-admin.ory.svc.cluster.local:4434/

deployment:
  resources:
    limits:
      memory: 64Mi
    requests:
      memory: 32Mi
      cpu: 25m