homeprod/kubernetes/dev/gitea/values.yaml

image:
    tag: 1.27.1
    rootless: true
ingress:
    enabled: true
    hosts:
        - host: git.vhaudiquet.fr
          paths:
            - path: /
              pathType: Prefix
# Disable HA, we are on a 1-node cluster
redis-cluster:
    enabled: false
# Valkey cluster is the new default in chart 12.x - must be explicitly disabled
valkey-cluster:
    enabled: false
# Use standalone Valkey (replaces 'redis' in chart 12.x)
valkey:
    enabled: true
    master:
        resources:
            requests:
                cpu: 100m
                memory: 256Mi
            limits:
                cpu: 500m
                memory: 1Gi
postgresql:
    enabled: true
    global:
        postgresql:
            auth:
                postgressPassword: ENC[AES256_GCM,data:rMBRo26YmyMGqA==,iv:e0wbEdc+hPZXi3Lx3GKVD3wpk40lJhRSBxcZ2OsugmE=,tag:GUGn4Zn4/SvtiCEUqE8f7w==,type:str]
                password: ENC[AES256_GCM,data:Hte4fPFncct3HA==,iv:0skkN84YffZZUZ8yPiN9UC03jBLzFhd6XvdPf/uiYks=,tag:03Pz9EQXQSXdRZ5P7Qy4Mw==,type:str]
                database: gitea
                username: ENC[AES256_GCM,data:iTcG77k=,iv:u5SMbimGtZbvIRaVISQ6DubVk5Ue8uBRlLwX/gt8SrE=,tag:u986P6CoVw2jmzKiu7BOxQ==,type:str]
    volumePermissions:
        enabled: true
    primary:
        resources:
            requests:
                cpu: 100m
                memory: 256Mi
            limits:
                cpu: 500m
                memory: 1Gi
        livenessProbe:
            enabled: true
            initialDelaySeconds: 30
            periodSeconds: 10
            timeoutSeconds: 10
            successThreshold: 1
            failureThreshold: 10
        readinessProbe:
            enabled: true
            initialDelaySeconds: 5
            periodSeconds: 10
            timeoutSeconds: 10
            successThreshold: 1
            failureThreshold: 6
postgresql-ha:
    enabled: false
persistence:
    enabled: true
    subPath: data
    size: 30Gi
extraVolumes:
    - name: git
      nfs:
        server: truenas.lan
        path: /mnt/fast_app_data/git
extraContainerVolumeMounts:
    - name: git
      mountPath: /git
clusterDomain: cluster.local
gitea:
    oauth:
        - name: Authentik
          provider: openidConnect
          key: ENC[AES256_GCM,data:PvsQlwsJoK+CM8AR3c+8oW2mlUC/5fzWldkyx7G6LrEFlIaofY3wkQ==,iv:Pp/kqfmf56Y6WObS+ItUBazQkazsbVdBXKuNTgjph48=,tag:m5bKClG6BqaGDAB9nUwv5w==,type:str]
          secret: ENC[AES256_GCM,data:w4/0hCwv4OzQMkBxlZE1p09eWcUcMN776D9FUon/Z9e28vkTJX/9EyFBd/GXvQ7vfif64CwNj1ESVhjWPLqNMw09eKQPKZ23VbmfK+63YRf3nxNqVRat4JWkdhFYnB45bFbUb3kaU9AtArUJNrUXlcvk8Vx5mb6jOMat1j5bnMk=,iv:6im6Xy98syFlxLfkBxQDFRD5HDtphnY+LAxsnFLPmec=,tag:b26bKjdJZUx2RQy0LuksSA==,type:str]
          autoDiscoverUrl: https://authentik.vhaudiquet.fr/application/o/gitea/.well-known/openid-configuration
    config:
        APP_NAME: Gitea
        server:
            ROOT_URL: https://git.vhaudiquet.fr
        lfs:
            STORAGE_TYPE: local
            PATH: /git/lfs
        repository:
            ROOT: /git/repo
        database:
            DB_TYPE: postgres
        service:
            ALLOW_ONLY_EXTERNAL_REGISTRATION: true
        actions:
            ENABLED: true
        oauth2_client:
            ENABLE_AUTO_REGISTRATION: true
            ACCOUNT_LINKING: login
        openid:
            ENABLE_OPENID_SIGNIN: false
            ENABLE_OPENID_SIGNUP: false
        indexer:
            ISSUE_INDEXER_TYPE: bleve
            REPO_INDEXER_ENABLED: true
# Resource limits for Gitea container
resources:
    requests:
        cpu: 100m
        memory: 512Mi
    limits:
        cpu: 500m
        memory: 1Gi
replicaCount: 1
sops:
    lastmodified: "2026-09-22T19:58:26Z"
    mac: ENC[AES256_GCM,data:mZVYWh/cbmNDVc0JrSXMDEWPcUVdz3AFBGasBh4/7XBqaM07bXRxb0HpXL4ycjtm5MNJgcd3mYe8os/hp43L6euTRHOcZPFUZptbDcjKkh+HqPhFH82l3O31RoX+rWnShWZlGFNqKw2r9EBsi0hpc4crQi95A1pPXvdT1Cutg98=,iv:nt0hYaKVVrlgpxdiVcG373/mmq8fkoRih5RKs7lwBuM=,tag:ttJD2nMAsEqcn3s6vS2tGA==,type:str]
    pgp:
        - created_at: "2026-09-22T19:58:26Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiARAApSPPtEtLVE806caqO+bGbAO+ma+t2vIYWz54i6Nl0utk
            SvWJ4AZZN6Xj495k8TLS3/fvZ1wNJsKma1p+5axCBUEDokfJaNq1/93nhc1oUtP3
            XROblLB9HoiMErK4qoZ6lUAC7mxEsWjEfUvoQdrmO15qEuyklF4csXtx6CsH/yCp
            eNx6UtpHjUwSqfyx0ri4ItQxrsqDDdJSdL7mCoUq/hNGyyE799+6aUVffynOk0qA
            UrlJOEj9glrwlwQpbss+zWfeFjoCp0D5H+2bQogxn4zAZrxvRc1JMQKnaJu7kn48
            K5dSQj3kriQMspi+GSCxMmUbjM8tIdamHIPigVVKDSZg/OJvjZxQV/czkiKIyTdf
            bPhVt4pYVPQwO5OWzZOkfNTnngMLNy/Fv3sdMU04R0fUmPbnzFTJ1RFEKzOmVtaj
            wA2m2U+lkBMHEC520YNVTAlqYs9oESRu8MQmofqLIVSVQsrvsMgtLECqsWFtA6U3
            Siodceg57G4P2MU+7BiYfHCboPnIC6cra0qvg/FyTh3JO8Wem284Ju5j9z1acvgS
            3oImIjmA/BnQ5YE5AOStRW6mD0g13AT8RSeYw7xYWmaO9sYtmoWJT185sBzfi6f5
            jTWMyMkgAw4qp8ieNnOIG5/w5+BS+mUP3Kb28erhZFNxSBIZB74+pqlad9GpWAnS
            XgGzdO0i5Y3gM6FCegRTOh+OSF4apw7uOLfDB4p1NDzP24U3R9XSlwSk+EE0Gk4t
            nJ0HmRj41lY4/19yfk1ZAv7byLJGfpf21CAplQvqo8BT4RvFyXVXjWK2sC2lpl4=
            =wTZ0
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*PASS|.*SOCIALACCOUNT_PROVIDERS|.*\.ya?ml)$
    mac_only_encrypted: true
    version: 3.10.2