# Number of replicas
replicaCount: 1
# Container image configuration
image:
    repository: git.vhaudiquet.fr/vhaudiquet/vhaudiquet.fr
    pullPolicy: IfNotPresent
    # The image tag defaults to the chart appVersion (which is set to git SHA by CI).
    # Override this only if you need a specific version.
    tag: ""
# Image pull secrets for private registries
imagePullSecrets: []
# Ingress configuration
ingress:
    enabled: true
    className: ""
    annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
    hosts:
        - host: vhaudiquet.fr
          paths:
            - path: /
              pathType: Prefix
    tls: []
# Environment variables
env:
    NGINX_HOST: vhaudiquet.fr
    NGINX_PORT: "80"
# NFS Storage configuration for public files
nfs:
    enabled: true
    # NFS server IP address
    server: truenas.lan
    # NFS export path
    path: /mnt/main_storage/public
    # Mount path inside the container
    mountPath: /usr/share/nginx/html/public
    # Storage size for PVC
    storageSize: 10Gi
    # Storage class name (leave empty for default)
    storageClassName: ""
    # Allow the pod to start even when NFS is unreachable (uses emptyDir + initContainer)
    softFail: true
# Tolerate failover nodes
tolerations:
    - key: ENC[AES256_GCM,data:ja29UypZ8PY4,iv:OclYLpgX/HfvEBeAXsBvaAA4hB0l2Cg0JR7grR1lTTg=,tag:NdWJQdG7glFCOyDHzvXibQ==,type:str]
      operator: Equal
      value: ENC[AES256_GCM,data:kbW9J1Gq96Y=,iv:TbCK7mPcikPYnDIxMVXqCCdhoVFKdinB7D1OczpAsxU=,tag:MHHTSu4zr+BE3iY2q+l06w==,type:str]
      effect: NoSchedule
    - key: ENC[AES256_GCM,data:EmD2g2fExXx1efzKZEBR+gDI0FurCGY7drZeJQ4UWWqWD0WK9w==,iv:g4NEJKZ4VMs4CWjWhV6M3IR1f3iC+1FuoCLnrmWTneA=,tag:0G9psRenOhpP1jF4O/gB2w==,type:str]
      operator: Exists
      effect: NoSchedule
# Prefer (non-failover nodes) in normal operation
affinity:
    nodeAffinity:
        preferredDuringSchedulingIgnoredDuringExecution:
            - weight: 100
              preference:
                matchExpressions:
                    - key: ENC[AES256_GCM,data:Awenw5YOeHT4Ox4zmVS1bwOUqEI=,iv:H4Wh8ym80hb7Q+5ZUwFsZi7eJ4PHSLrwV6ug5o6BIzA=,tag:eEXV1rSrhj+h3uLoAPgGxw==,type:str]
                      operator: NotIn
                      values:
                        - "true"
sops:
    lastmodified: "2026-08-26T19:28:04Z"
    mac: ENC[AES256_GCM,data:SykWsjz27MliQeGiof0rYYzo3/qexc+HkYrDW6qTte82+WB4EJN32VeHjU77pPcFHntr6vOJWJuIH+7oP9y6IUp8v2W9L3RF+2s497OLp6s2+rkec7cBNczW7rulTI1ByimcleYuDIDq7X38En1Cy0DLqJfQsgmGZNH4SW0EMQw=,iv:/bQGm0olX0CSlIml6gVFHwXExOhh7IhmGwxkCKesIV8=,tag:RM1BEKHJAxNO+xJSMW6BAA==,type:str]
    pgp:
        - created_at: "2026-08-26T19:28:04Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ//Te5mPuzpn3t/Tjl48GhLVXX85mm+FmcXLFHD9onv2SS4
            ojlbXYQcaQyvChWNCHyQ1COubkTWa0JOk43lNDmyrJoTq0fh0avX4oqtJn0eUg7a
            Ss0xwrUjJ9wQDScyZaqNHH6H3Km2JDll+6ObLkX7qvTvQoi6x8RMxqTpeJ8G8bmS
            /2sOK5oj9xZlGrA+Bz8u+JE4MguhHwf1WvcJ5dBwaDYgEISUpaTalAKjrLRHFqRL
            8lyaFqMNBy8VB/zhgJDxy7WhZKv3wGtU4cNmYatJUPWHcjoTSiaNGiu1+7XnjBxY
            muso76okHjAvf0qiEE1wfDvxuB2VpZyj4QiAgVctcq+hq3yW08FftdMq7xtIiYgw
            Xsoryrc0reXys4j7V7/GT+g2lIbjOR0EbnY69cLOkidijEIxuqW5F2dSYXv6E1Sn
            AowT5SH95RyfNV2TghUL7Z9z5a/xzhBz0gQBVvlxcJntpMqkaah+ffwYHHY9nPPm
            KynAk3zHkRd3MKHHZDrcYwnvhdDAQf/OVrHq34CB0uMIqDY/91EoOE3MiasvzREH
            8P53YoktNdw/TV7RIhYaHfn6/0J1qw475TiDHEaY/Zy3cXBI1v/BD5Q0qp0ECKr0
            iYuRtMm7GZNFp6Xj26XbxChPH9MEPvrAkM5iTZ3kXlajjKzNHbMV2ANMI0wxBl3S
            XgF7I4/pzOC+RzJd5hQFFWOF9aWYFeIxd+IQQWwTDDJ/k+8+Ttd/I6Bq5hdSTJgS
            OUSnJ4SmnZOK5iIZWVsRvCBCA3ukKUiIsUhFf9UlYxFjkKArOXnReYeaOwzyicQ=
            =6UoF
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
    mac_only_encrypted: true
    version: 3.10.2