# Aligned with Swarm installer defaults:
#   - Registry: app/playbooks/tasks/manage-images.yml (user public, password Andrew01..Release)
#   - App config sample: app/configurations.yml (placeholders + intercom block)

registry:
  createPullSecret: true
  pullSecretName: hub-andrewalliance
  server: hub.andrewalliance.com
  username: public
  password: Andrew01..Release

imagePullSecrets:
  - name: hub-andrewalliance

persistence:
  mode: hostPath
  hostPath:
    data: /opt/onelab/data
    logs: /opt/onelab/logs

postgresql:
  auth:
    password: "DBPasswordPlaceholder"

onelab:
  # Match how users reach the UI (Ingress host); use https:// when ingress.tls is true.
  domain: "http://onelab.local"
  secrets:
    authTokenKey: "TokenAuthPlaceholder"
    monitoringToken: "TokenMonitoringPlaceholder"
    rabbitToken: "TokenRabbitPlaceholder"
  intercom:
    appid: "zxvgsagz"
    secret: "QUw2jEV8utIpe9DeYjOqBjhBY9VxjXddKUCISUNu"

# ClusterIP keeps traffic via Ingress only; use NodePort instead if you need direct node:port access.
revproxy:
  serviceType: ClusterIP

ingress:
  enabled: true
  className: traefik
  # Set DNS or /etc/hosts to this host pointing at your ingress (e.g. worker external IP or LB).
  host: onelab.local
  path: /
  pathType: Prefix
  annotations: {}
  tls: false
  # tls: true
  # tlsSecretName: onelab-tls   # create with cert-manager or kubectl