# Aligned with Swarm installer defaults:
#   - Registry: app/playbooks/tasks/manage-images.yml (user public, password Andrew01..Release)
#   - App config sample: app/configurations.yml (placeholders + intercom block)

registry:
  createPullSecret: true
  pullSecretName: hub-andrewalliance
  server: hub.andrewalliance.com
  username: public
  password: Andrew01..Release

imagePullSecrets:
  - name: hub-andrewalliance

persistence:
  mode: hostPath
  hostPath:
    data: /opt/onelab/data
    logs: /opt/onelab/logs

postgresql:
  auth:
    password: "DBPasswordPlaceholder"

onelab:
  # Public URL (must match ingress host + scheme).
  domain: "https://onelab.k8s.selair.it"
  secrets:
    authTokenKey: "TokenAuthPlaceholder"
    monitoringToken: "TokenMonitoringPlaceholder"
    rabbitToken: "TokenRabbitPlaceholder"
  intercom:
    appid: "zxvgsagz"
    secret: "QUw2jEV8utIpe9DeYjOqBjhBY9VxjXddKUCISUNu"

# ClusterIP keeps traffic via Ingress only; use NodePort instead if you need direct node:port access.
revproxy:
  serviceType: ClusterIP

ingress:
  enabled: true
  className: traefik
  host: onelab.k8s.selair.it
  path: /
  pathType: Prefix
  tls: true
  # cert-manager writes the certificate into this Secret in the release namespace
  tlsSecretName: onelab-tls-k8s-selair
  certManager:
    clusterIssuer: letsencrypt-prod
  annotations: {}