helmrelease.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: hammond
  namespace: hammond
spec:
  chart:
    spec:
      chart: hammond
      version: 0.6.4
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        namespace: flux-system
        name: gabe565
  interval: 1h
  driftDetection:
    mode: enabled
  values:
    env:
      TZ: America/Chicago
      JWT_SECRET: ${jwt_secret}

    podLabels:
      policy.gabe565.com/ingress-ingress: "true"

    securityContext:
      readOnlyRootFilesystem: true

    ingress:
      main:
        enabled: true
        annotations:
          nginx.ingress.kubernetes.io/auth-url: |-
            http://ak-outpost-gabernetes.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
          nginx.ingress.kubernetes.io/auth-signin: |-
            https://$host/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
          nginx.ingress.kubernetes.io/auth-response-headers: |-
            Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
          nginx.ingress.kubernetes.io/auth-snippet: |
            proxy_set_header X-Forwarded-Host $http_host;
        hosts:
          - host: ${app_url}
            paths:
              - path: /
        tls:
          - secretName: ${certificate_name}
            hosts:
              - ${app_url}

    persistence:
      config:
        enabled: true
        storageClass: longhorn-ssd
        accessMode: ReadWriteOnce
        size: 2Gi
      assets:
        enabled: true
        storageClass: longhorn-ssd
        accessMode: ReadWriteOnce
        size: 2Gi