auth:
  adminUser: mareshqadmin
  adminPassword: mareshqadmin

global:
  storageClass: longhorn

replicaCount: 2

pdb:
  create: true
  minAvailable: 1

autoscaling:
  enabled: false

resources:
  limits:
    cpu: "1"
    memory: 2Gi
  requests:
    cpu: 500m
    memory: 1Gi

# Pods must be spread across nodes
# See: https://github.com/bitnami/charts/blob/main/bitnami/common/templates/_affinities.tpl#L56-L106
# podAntiAffinityPreset: hard

updateStrategy:
  type: RollingUpdate
  rollingUpdate:
    maxUnavailable: 1

service:
  type: ClusterIP
  # http:
  #   enable: false

ingress:
  enabled: true
  hostname: sso.mareshq.com

  servicePort: https

  ingressClassName: nginx

  tls: true

  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    # Allow self-signed certificates on the backend
    nginx.ingress.kubernetes.io/server-snippet: |
      proxy_ssl_verify off;
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
    nginx.ingress.kubernetes.io/proxy-buffering: "on"
    nginx.ingress.kubernetes.io/proxy-buffers-number: "4"
    nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"

tls:
  enabled: true
  autoGenerated: true

production: true

metrics:
  enabled: true

  serviceMonitor:
    enabled: false

postgresql:
  enabled: false

externalDatabase:
  existingSecret: mareshq-keycloak-database-credentials
  existingSecretHostKey: host
  existingSecretPortKey: port
  existingSecretUserKey: username
  existingSecretDatabaseKey: database
  existingSecretPasswordKey: password

startupProbe:
  # Keycloak should be ready to serve requests within 15 minutes
  enabled: true
  initialDelaySeconds: 180 # 3min
  periodSeconds: 10
  timeoutSeconds: 5
  failureThreshold: 80 # 12min
  successThreshold: 1

# Custom theme installation and configuration
initContainers:
  - name: theme-installer
    image: busybox:latest
    command:
      - /bin/sh
      - "-c"
      - |
        wget https://vojtechmares.github.io/cdn/keywind.tar.gz -O /tmp/keywind.tar.gz
        tar -xzvf /tmp/keywind.tar.gz -C /opt/bitnami/keycloak/themes

    volumeMounts:
      - mountPath: /opt/bitnami/keycloak/themes/keywind
        name: theme

extraVolumes:
  - name: theme
    emptyDir: {}

extraVolumeMounts:
  - name: theme
    mountPath: /opt/bitnami/keycloak/themes/keywind