# Base Gitea Helm values (chart: gitea/gitea, v12.5.0).
# DOMAIN_SUFFIX is replaced by overlay patches.
# Reference: https://gitea.com/gitea/helm-gitea/src/branch/main/values.yaml

# Disable bundled DB and cache — we use shared CloudNativePG + Valkey
postgresql:
  enabled: false
postgresql-ha:
  enabled: false
valkey-cluster:
  enabled: false
valkey:
  enabled: false

gitea:
  admin:
    username: gitea_admin
    existingSecret: gitea-admin-credentials
    email: gitea@local.domain

  config:
    server:
      DOMAIN:           src.DOMAIN_SUFFIX
      ROOT_URL:         https://src.DOMAIN_SUFFIX/
      SSH_DOMAIN:       src.DOMAIN_SUFFIX
      LFS_START_SERVER: "true"

    database:
      DB_TYPE:  postgres
      HOST:     postgres-rw.data.svc.cluster.local:5432
      NAME:     gitea_db
      USER:     gitea
      SSL_MODE: disable
      # PASSWD injected via additionalConfigFromEnvs below

    cache:
      ADAPTER: redis
      # Valkey is Redis protocol-compatible; Gitea's redis adapter works against Valkey
      HOST:    redis://valkey.data.svc.cluster.local:6379/0?pool_size=100&idle_timeout=180s

    session:
      PROVIDER:        redis
      PROVIDER_CONFIG: redis://valkey.data.svc.cluster.local:6379/1?pool_size=100&idle_timeout=180s

    queue:
      TYPE:     redis
      CONN_STR: redis://valkey.data.svc.cluster.local:6379/2?pool_size=100&idle_timeout=180s

    storage:
      STORAGE_TYPE:   minio
      MINIO_ENDPOINT: seaweedfs-filer.storage.svc.cluster.local:8333
      MINIO_BUCKET:   sunbeam-git-lfs
      MINIO_USE_SSL:  "false"
      # MINIO_ACCESS_KEY_ID / MINIO_SECRET_ACCESS_KEY from gitea-s3-credentials Secret

  additionalConfigFromEnvs:
    - name: GITEA__DATABASE__PASSWD
      valueFrom:
        secretKeyRef:
          name: gitea-db-credentials
          key: password
    - name: GITEA__STORAGE__MINIO_ACCESS_KEY_ID
      valueFrom:
        secretKeyRef:
          name: gitea-s3-credentials
          key: access-key
    - name: GITEA__STORAGE__MINIO_SECRET_ACCESS_KEY
      valueFrom:
        secretKeyRef:
          name: gitea-s3-credentials
          key: secret-key

resources:
  limits:
    memory: 256Mi
  requests:
    memory: 128Mi
    cpu: 100m

persistence:
  enabled: true
  size: 5Gi