Files

79 lines
3.3 KiB
YAML

# CouchDB for Obsidian LiveSync
# Single-node deployment with CORS configured for Obsidian plugin compatibility
clusterSize: 1
allowAdminParty: false
createAdminSecret: ENC[AES256_GCM,data:tq55XA==,iv:jNb8l50LZyGleKH/6gMge4NcVB/QI7DYvfjFzi0hXBk=,tag:UAdyYHVSxx8pVRoq2eB6tg==,type:bool]
autoSetup:
enabled: true
adminUsername: obsidian
adminPassword: ENC[AES256_GCM,data:HhKrquaOqxB3BkhC3MM=,iv:WADwvJbfNWNfHipSy3prQO6+Xo5haL7XTxANMdb/lbQ=,tag:dInMwg2yBubwFIAtt+rW8Q==,type:str]
image:
repository: couchdb
tag: 3.5.2
pullPolicy: IfNotPresent
# Enable CORS for Obsidian LiveSync plugin
# Equivalent to the Traefik CORS middleware in the Docker setup,
# but handled natively by CouchDB (cleaner and more reliable)
couchdbConfig:
couchdb:
uuid: b0a1c2d3-e4f5-6789-abcd-ef0123456789
cluster:
q: 1
chttpd:
bind_address: any
require_valid_user: false
httpd:
enable_cors: "true"
cors:
credentials: "true"
origins: app://obsidian.md,capacitor://localhost,http://localhost
headers: accept,authorization,content-type,origin,referer
methods: GET,PUT,POST,HEAD,DELETE
persistentVolume:
enabled: true
accessModes:
- ReadWriteOnce
size: 5Gi
storageClass: longhorn
ingress:
enabled: true
className: traefik
hosts:
- obsidian-livesync.lan
path: /
annotations: {}
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: 500m
memory: 512Mi
sops:
lastmodified: "2026-08-26T19:28:04Z"
mac: ENC[AES256_GCM,data:dVVKNsyOx9q89vnvPvMNuDCW7Ge/7ZB/pEG+ixqJVzIlHoyetmsYywolAO33Gc5iy6f5qhQKjmj9G53+eN7qa0qJMFiJR/cqr08RVp0oo80E1Dm9z4KsTv+oRd7vI9JFygk0Q2mk2vb3wVrqaPywU+2bOtFEZ6j2ZwtuWYTosXc=,iv:SsyFIrX0P10x73fRJaju0/QKlStzLGP9TE9sptIa0MA=,tag:vnqsKfk/Zs4M4O1R9hdmsg==,type:str]
pgp:
- created_at: "2026-08-26T19:28:04Z"
enc: |-
-----BEGIN PGP MESSAGE-----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=
=fYOk
-----END PGP MESSAGE-----
fp: DC6910268E657FF70BA7EC289974494E76938DDC
encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
mac_only_encrypted: true
version: 3.10.2