# Gitea — lightweight git host replacing GitLab (Phase 2B). External Postgres (existing in-cluster
# `postgres`), no bundled DB/redis/memcached, Actions off (Argo does CI). Internal-only until cutover.
replicaCount: 1
image:
  rootless: true

# RWO PVC (sbs-default-retain) → only one pod can mount it. RollingUpdate deadlocks (new pod can't
# attach while old holds it). Recreate terminates old before starting new.
strategy:
  type: Recreate

# Disable all bundled subcharts — reuse the existing in-cluster postgres, no redis/memcached.
postgresql:
  enabled: false
postgresql-ha:
  enabled: false
redis-cluster:
  enabled: false
redis:
  enabled: false
# chart 12.x replaced redis with valkey — disable both, gitea uses embedded queue/cache/session
valkey-cluster:
  enabled: false
valkey:
  enabled: false

persistence:
  enabled: true
  size: 5Gi
  storageClass: sbs-default-retain

resources:
  requests: { cpu: 100m, memory: 256Mi }
  limits:   { cpu: "1",  memory: 2Gi }   # 2Gi headroom: indexing the 876MB foxhunt pack OOMed at 512Mi

service:
  http: { type: ClusterIP, port: 3000 }
  ssh:  { type: ClusterIP, port: 22 }

gitea:
  admin:
    existingSecret: gitea-admin
  config:
    actions:
      ENABLED: "false"        # Argo does CI/CD; Gitea Actions off (subchart removed in chart 12.x)
    server:
      ROOT_URL: https://git.fxhnt.ai/
      DOMAIN: git.fxhnt.ai
      SSH_DOMAIN: git.fxhnt.ai
      SSH_PORT: "22"            # clean git@git.fxhnt.ai clone URLs; :2222 retired (Task 5).
      DISABLE_SSH: "false"
    database:
      DB_TYPE: postgres
      HOST: postgres.foxhunt.svc.cluster.local:5432
      NAME: gitea
      USER: gitea
    service:
      DISABLE_REGISTRATION: "true"
    webhook:
      # allow delivery to in-cluster targets (Argo Events eventsource on the 10.32.x service CIDR);
      # default blocks private hosts. Argo auto-deploy webhook needs this.
      ALLOWED_HOST_LIST: "private"
    # No redis/memcached — use embedded adapters
    cache:
      ADAPTER: memory
    session:
      PROVIDER: db
    queue:
      TYPE: level
  additionalConfigFromEnvs:
    - name: GITEA__database__PASSWD
      valueFrom:
        secretKeyRef: { name: gitea-db, key: password }
