apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: hedgedoc
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "2"
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: https://nicholaswilde.github.io/helm-charts
    chart: hedgedoc
    targetRevision: "1.1.0"
    helm:
      values: |
        mariadb:
          enabled: false

        env:
          TZ: Europe/Moscow
          CMD_DB_DIALECT: postgres
          DB_HOST: shared-pg-rw.cnpg.svc.cluster.local
          DB_PORT: "5432"
          DB_USER: hedgedoc
          DB_NAME: hedgedoc
          CMD_DOMAIN: hedgedoc.t0rt1k.tech
          CMD_PROTOCOL_USESSL: "true"
          CMD_URL_ADDPORT: "false"
          CMD_ALLOW_ORIGIN: "['hedgedoc.t0rt1k.tech']"

        secret:
          DB_PASS: hedgedoc-change-me

        ingress:
          enabled: true
          annotations:
            cert-manager.io/cluster-issuer: letsencrypt-production
            traefik.ingress.kubernetes.io/router.entrypoints: websecure
            traefik.ingress.kubernetes.io/router.tls: "true"
          hosts:
            - host: hedgedoc.t0rt1k.tech
              paths:
                - path: /
                  pathType: Prefix
          tls:
            - secretName: hedgedoc-tls
              hosts:
                - hedgedoc.t0rt1k.tech

        persistence:
          config:
            enabled: true
            size: 1Gi
            accessMode: ReadWriteOnce

        resources:
          requests:
            cpu: 100m
            memory: 256Mi
          limits:
            cpu: 500m
            memory: 512Mi

  destination:
    server: https://kubernetes.default.svc
    namespace: hedgedoc
  syncPolicy:
    syncOptions:
      - CreateNamespace=true