apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: forgejo
  namespace: argocd
spec:
  destination:
    namespace: forgejo
    server: {{ $.Values.spec.destination.server }}
  project: homelab
  source:
    path: .
    repoURL: oci://code.forgejo.org/forgejo-helm/forgejo
    targetRevision: 17.0.1
    helm:
        values: |
          gitea:
            admin:
              username: 'mh-admin'
              password: 'start123'
              email: 'matthias@hnrx.de'
            oauth:
              - name: 'Authentik'
                provider: 'openidConnect'
                key: 'SFcyq6DYywWMcG2VxFjC6bAcsC5BSHmlUaDIvSan'
                secret: 'AZNCzbYDFExH8EUIBUOtRqv3MClA83N87TzQKJ2sAmNNdwbrU0pKVXJq4cOkxWugoG7AnizcAdlzl4n5FicIUWxPUvRRhkRchRqRoiimLg20KNqRjmll2SUoPsE0RhxK'
                autoDiscoverUrl: 'https://auth.hnrx.net/application/o/githnrxnet/.well-known/openid-configuration'
            config:
              actions:
                ENABLED: true
                LOG_RETENTION_DAYS = 365
                ARTIFACT_RETENTION_DAYS = 90
              api:
                MAX_RESPONSE_ITEMS: 100
              mailer:
                ENABLED: true
                SMTP_ADDR: 'smtp.gmail.com'
                SMTP_PORT: "465"
                FROM: 'matthias.hinrichs@gmail.com'
                USER: 'matthias.hinrichs'
                PASSWD: "kuid ogzo mnej hbvj"
                PROTOCOL: smtps
              migrations:
                ALLOWED_DOMAINS: "*.hnrx.net"
                ALLOW_LOCALNETWORKS: true
              openid:
                ENABLE_OPENID_SIGNIN: false
              database:
                DB_TYPE: postgres
                HOST: postgresql-test1-pgbouncer.everest-db.svc:5432
                NAME: postgres
                USER: postgres
                PASSWD: 3yZ64SU8sLqS-MijJh.aPJ59
                SSL_MODE: require
              picture:
                GRAVATAR_SOURCE: gravatar
              server:
                LANDING_PAGE: explore
                OFFLINE_MODE: false
              service:
                ENABLE_NOTIFY_MAIL: true
              webhook:
                ALLOWED_HOST_LIST: "*.hnrx.net"
                SKIP_TLS_VERIFY: true
                DELIVER_TIMEOUT: 30

          postgresql:
            enabled: false
          persistence:
            enabled: true
            storageClass: nfs-csi
            existingClaim: gitea-shared-storage
          

          httpRoute:
            enabled: true
            hostnames:
              - forgejo.k8s.hnrx.net
            parentRefs:
              - name: shared-gateway
                namespace: default
  syncPolicy:
    automated: 
      selfHeal: true
    syncOptions:
      - CreateNamespace=true