add hedgedoc app

argocd/apps/hedgedoc.yaml

@@ -0,0 +1,71 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: hedgedoc
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: https://nicholaswilde.github.io/helm-charts
+    chart: hedgedoc
+    targetRevision: "1.1.0"
+    helm:
+      values: |
+        mariadb:
+          enabled: false
+
+        env:
+          TZ: Europe/Moscow
+          CMD_DB_DIALECT: postgres
+          DB_HOST: shared-pg-rw.cnpg.svc.cluster.local
+          DB_PORT: "5432"
+          DB_USER: hedgedoc
+          DB_NAME: hedgedoc
+          CMD_DOMAIN: hedgedoc.t0rt1k.tech
+          CMD_PROTOCOL_USESSL: "true"
+          CMD_URL_ADDPORT: "false"
+          CMD_ALLOW_ORIGIN: "['hedgedoc.t0rt1k.tech']"
+
+        secret:
+          DB_PASS: hedgedoc-change-me
+
+        ingress:
+          enabled: true
+          annotations:
+            cert-manager.io/cluster-issuer: letsencrypt-production
+            traefik.ingress.kubernetes.io/router.entrypoints: websecure
+            traefik.ingress.kubernetes.io/router.tls: "true"
+          hosts:
+            - host: hedgedoc.t0rt1k.tech
+              paths:
+                - path: /
+                  pathType: Prefix
+          tls:
+            - secretName: hedgedoc-tls
+              hosts:
+                - hedgedoc.t0rt1k.tech
+
+        persistence:
+          config:
+            enabled: true
+            size: 1Gi
+            accessMode: ReadWriteOnce
+
+        resources:
+          requests:
+            cpu: 100m
+            memory: 256Mi
+          limits:
+            cpu: 500m
+            memory: 512Mi
+
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: hedgedoc
+  syncPolicy:
+    syncOptions:
+      - CreateNamespace=true