# CouchDB for Obsidian LiveSync
# Single-node deployment with CORS configured for Obsidian plugin compatibility
clusterSize: 1
allowAdminParty: false
createAdminSecret: ENC[AES256_GCM,data:qCS2Aw==,iv:krKXRZ/w5sXAdb6LQqqKm2bABA68QGxV/x0zalpwFgs=,tag:j4apfBIYrPrgZGBp5vIH0g==,type:bool]
autoSetup:
    enabled: true
adminUsername: obsidian
adminPassword: ENC[AES256_GCM,data:jKwtIOt0yvxfoS7JhXs=,iv:j3KMCBjl4mtg+Tkbt4ooZnqvd8tGKkUf2psJlws31Ag=,tag:AjJkxLbOKx1kBlOfPRS68w==,type:str]
image:
    repository: couchdb
    tag: 3.5.2
    pullPolicy: IfNotPresent
# Enable CORS for Obsidian LiveSync plugin
# Equivalent to the Traefik CORS middleware in the Docker setup,
# but handled natively by CouchDB (cleaner and more reliable)
couchdbConfig:
    couchdb:
        uuid: b0a1c2d3-e4f5-6789-abcd-ef0123456789
    cluster:
        q: 1
    chttpd:
        bind_address: any
        require_valid_user: false
    httpd:
        enable_cors: "true"
    cors:
        credentials: "true"
        origins: app://obsidian.md,capacitor://localhost,http://localhost
        headers: accept,authorization,content-type,origin,referer
        methods: GET,PUT,POST,HEAD,DELETE
persistentVolume:
    enabled: true
    accessModes:
        - ReadWriteOnce
    size: 5Gi
    storageClass: longhorn
ingress:
    enabled: true
    className: traefik
    hosts:
        - obsidian-livesync.lan
    path: /
    annotations: {}
resources:
    requests:
        cpu: 100m
        memory: 256Mi
    limits:
        cpu: 500m
        memory: 512Mi
sops:
    lastmodified: "2026-08-16T21:48:44Z"
    mac: ENC[AES256_GCM,data:he/K5j1OtA9jwaVkjI7fRMzBjsXpTAwtxlzfKObix9U5FT3eZR/BUFiugACufOLxzltY4HYlGK0mSKID+Jp9bMz1F/QmdGv5+HRRPRIGphNiG7aZWaJJTlJ4/0JjLJtONxLqASeoTap89Q/yuphb3+6ZNCcCsZQLMJbz7gEZ+cE=,iv:Pf0IlT9wdnwO/H2ABiTHsOc7DuBZjBy25y8SW9nC0wU=,tag:6ub3N8LDu6Y2lpsC/iLiaA==,type:str]
    pgp:
        - created_at: "2026-08-16T21:48:44Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ/8Dc+KANhQYaPDLXEw5hJO0zHVfKjvh7KXH6s20b132DZh
            7G5xRs1srollgxKPL4VYI0g1TQvIIP5+54wlCGxVow3ly93qV2FCTxxeGampb5VN
            LiPaPam/6www/JCxuqEcWbib6T8qzdfrGeS0CiXxNEW0GMZsOj/1QGpIfEr2TdTN
            O5Wf+qVHoUb51dTdO29BAREKCO953DAI+BmsvHsQgMtxmngrq6ufCyh0Els7U4HK
            E1B03E7tEgsWPkZNJqULUF4Ux9nqK3xFbWFu6BJlSbB45mYjouWbT4XF+9HpL59V
            55e0X7OWcMJ8YTL4cbAnXopDkFmVAkoDOKdQEcbc528hmcJOvv1acLG5wkeuiEjw
            G7Cp8M5t76LCvfnetFs9C8GZIPjyP+PHfsxYNlZIK3Qt8QTvOtt95ZWK6ijCJzUN
            CrLPXHRAvyWglzqT0s32JveNAfEr4CI8EcNSJ84S71FOhvmk5w6Kx9U19FHnMeHw
            Yt2Rr1h8OXi4NMkzmBU/XUj400mpzU3vmmdAYLGbXO1w8DjM5Qibt5ZK7DkZTtm5
            B2qVq1TVZEL0hg1nonTGt1LA/RzPvUs8wIfrzqW230qI+1DnKo/AOWZFt3z46aMu
            FZx40RpVif3ckv+JoVV6SS6pYQNXbjNPl4NupTdC9bwcbRwsX5fU6uEqkdJAqpXS
            XgE4u1kcJaDjlS+SX70HmjadjpCBgoiHIf9xU+oPBLh3t+fDiauzHl5iszGzayeV
            B7fSbNDm54Paum0cXPUB+FOWzh8lwkbLkE65Ld+nMeJ9C7PbX2cmMKkPKBO/rzs=
            =tlZW
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
    version: 3.10.2