# CouchDB for Obsidian LiveSync
# Single-node deployment with CORS configured for Obsidian plugin compatibility
clusterSize: 1
allowAdminParty: false
createAdminSecret: ENC[AES256_GCM,data:D8gRRA==,iv:tXfG0XWa1sQmIn/FZgPzW71HPyI8616QRm+Gk5jvlFA=,tag:vIecvbSvfGg9NOzUCG3uBg==,type:bool]
adminUsername: obsidian
adminPassword: ENC[AES256_GCM,data:GKfcIHrCqR+7AZI3QLg=,iv:SqjWWCuzWNnhHAkNsyOXzmyJcqD+yXAwgxLfeAliiBw=,tag:1oki6QKvLqTgyg1+IVaa0w==,type:str]
image:
    repository: couchdb
    tag: 3.5.2
    pullPolicy: IfNotPresent
# Enable CORS for Obsidian LiveSync plugin
# Equivalent to the Traefik CORS middleware in the Docker setup,
# but handled natively by CouchDB (cleaner and more reliable)
couchdbConfig:
    couchdb:
        uuid: b0a1c2d3-e4f5-6789-abcd-ef0123456789
    chttpd:
        bind_address: any
        require_valid_user: false
    httpd:
        enable_cors: "true"
    cors:
        credentials: "true"
        origins: app://obsidian.md,capacitor://localhost,http://localhost
        headers: accept,authorization,content-type,origin,referer
        methods: GET,PUT,POST,HEAD,DELETE
persistentVolume:
    enabled: true
    accessModes:
        - ReadWriteOnce
    size: 5Gi
    storageClass: longhorn
ingress:
    enabled: true
    className: traefik
    hosts:
        - obsidian-livesync.lan
    path: /
    annotations: {}
resources:
    requests:
        cpu: 100m
        memory: 256Mi
    limits:
        cpu: 500m
        memory: 512Mi
sops:
    lastmodified: "2026-08-16T20:27:58Z"
    mac: ENC[AES256_GCM,data:KDImaryg92Raz15vSIAXet7ZWncMiYU/jdMpR1BT1jwgd0qYIbfWo0oAo8v0iV3Sb1YK6utumUeDzOUikW2PQnkqVDzg1N+oSLKMbYKCkfYpiS81vFNljUtinbiEEgCv7djE+6d6iu0/ZsytMbyJRDr5D8iJrZldZ8o/o7DZTT4=,iv:asLBZWF5BqpeUMOWU36kB0rmd4xfolSzoxi3LTptRbc=,tag:GQcwiXn9P9/3Ror4cCmulw==,type:str]
    pgp:
        - created_at: "2026-08-16T20:27:58Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ//Tz0xpFvIAzTKlXg0rb3o+ViNEh/iQFp2hoM7DTylMWP7
            HlaCOZr2Cq+C7erTxU7PFYLdsziOyGzFwGAFK9ZQON0WfRzFkYbUHsT8Pp6fBRZo
            u7z5Y0Rkr0BdXOv9tXWVpgrui/ZZrtRyXBa9TJjmn5IY6XHED7MiD1hFaLHasNr3
            9L+jc7PKzQtpkj2wN9ebZrvwUewnUScNiHX4yFd08yBAMnRWsULBJ9kz0+n0Ncw3
            6JIEmfpkflK7pupM+Am4/ov+Yd/ImeI83oZTvgLNirdH32CnV4vEUyMyK6hupEY1
            u6p/PEDoG7cEpXDaXvRS23/2Dyhlyp3Kbp1+Pk/r46jh+OPtiRbi7u57PaEws/js
            eL5TBdpTmY7GGNu28btS0qDZl29OsGIEg/+eCG9OAOQdWPropcIFTiaQBjOB/0Rw
            HiASIJYpZbQR6d6b3FTAZ3iMmKGJIqM6rVAdgfPa28GIZXqD0DqNuiiv9MwuabtY
            6UYzDLOMFulXU70p2SNBO9qZtyz6GTENB9oZ0yWUV1Gwq6ZSQJmMw/k5wYxQ8PwP
            RLsiiXjVRnsiJ9lokvrB9IFpOBw2tz6v0eIpo5TutRZEef9qLt6wIq/kJ4rsXtU5
            ewVzrf9lZOKdoFGhHB6NMqFXStJMyIInI5pi2yDyK/4O262+k+PZiCcjWwmKqy3S
            XAEAMiI3SWK55m0lHcgKxboCKFMSiXPZXg3/XfyBdGeVxWue/T6Cr1RqknoUYTW5
            l18eXlTSfTt/dtvtVFdF55k2AEpNndS4SOfHu7EDV8B03XYInIPP9eHoyo2v
            =iwpx
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
    version: 3.10.2