apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: mastodon
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: https://mastodon.github.io/helm-charts/
    chart: mastodon
    targetRevision: "1.0.3"
    helm:
      values: |
        mastodon:
          localDomain: mastodon.t0rt1k.tech

          secrets:
            secretKeyBase: c858bb02549193f4677f06db375f6015c282d7c2912c0a894bdcab66948f5ebcbf10286c94bcec8306cf704ecfe8c59a871fb14bcc29b50bad4c192039f84c25
            vapidPrivateKey: 5mrGQP9Cvo_t5hPwuVzY-zGfK-2pScDk42yhTwN193c=
            vapidPublicKey: BF5GrO2MLqWBbIDhgmQP6xMMfqdor0Fm3KkjsMx_QYB5kKzdDvACwA59SP3T9zWWe5dB7EsYbHe-LF6S0sV7DKk=
            arePrimaryKey: 2kcXaHigLHS0HDAPyGv53M4QJxZ7VTPCKqrIxnHyK+M=
            areDeterministicKey: Oy5iD9DVPiCZu0PDKiv+R0MgvDHu7xYTT+U7Ml6HeBA=
            areKeyDerivationSalt: UiOT/p0DYXIQ82yABJlCErrPB/VSneb7jW+XQ6TBHrg=

          s3:
            enabled: true
            hostname: minio.minio.svc.cluster.local:9000
            endpoint: minio.minio.svc.cluster.local:9000
            protocol: http
            bucket: mastodon
            accessKeyId: admin
            secretAccessKey: change-me
            overridePathStyle: "true"

          web:
            resources:
              requests:
                cpu: 100m
                memory: 256Mi
              limits:
                cpu: 500m
                memory: 512Mi

          sidekiq:
            workers:
              - name: all-queues
                replicas: 1
                concurrency: 15
                resources:
                  requests:
                    cpu: 100m
                    memory: 256Mi
                  limits:
                    cpu: 500m
                    memory: 512Mi

          streaming:
            replicas: 1
            resources:
              requests:
                cpu: 50m
                memory: 128Mi
              limits:
                cpu: 250m
                memory: 256Mi

          smtp:
            fromAddress: notifications@t0rt1k.tech
            server: smtp.example.com
            port: 587
            username: dummy
            password: dummy

        postgresql:
          hostname: shared-pg-rw.cnpg.svc.cluster.local
          port: 5432
          database: mastodon
          username: mastodon
          password: change-me

        redis:
          hostname: redis-master.redis.svc.cluster.local
          port: 6379
          password: change-me

        elasticsearch:
          enabled: true
          hostname: opensearch-cluster-master.opensearch.svc.cluster.local
          port: 9200
          tls: false
          preset: single_node_cluster
          username: dummy
          password: dummy

        ingress:
          enabled: true
          className: traefik
          annotations:
            cert-manager.io/cluster-issuer: letsencrypt-production
            traefik.ingress.kubernetes.io/router.entrypoints: websecure
            traefik.ingress.kubernetes.io/router.tls: "true"
          hosts:
            - host: mastodon.t0rt1k.tech
              paths:
                - path: /
                  pathType: Prefix
          tls:
            - secretName: mastodon-tls
              hosts:
                - mastodon.t0rt1k.tech

        httproute:
          enabled: false
  destination:
    server: https://kubernetes.default.svc
    namespace: mastodon
  syncPolicy:
    syncOptions:
      - CreateNamespace=true