image:
  repository: zammad/zammad-docker-compose
  tag: 5.2.1-6
  pullPolicy: IfNotPresent
  imagePullSecrets: []
    # - name: "image-pull-secret"

service:
  type: ClusterIP
  port: 8080

ingress:
  enabled: true
  className: ""
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-production-issuer
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
    kubernetes.io/ingress.class: traefik
    traefik.ingress.kubernetes.io/router.middlewares: zammad-forwarded-proto@kubernetescrd
  hosts:
    - host: zammad.sapian.cloud
      paths:
        - path: /
          pathType: ImplementationSpecific
  tls: 
    - secretName: zammad-sapian-cloud-tls
      hosts:
        - zammad.sapian.cloud

secrets:
  autowizard:
    useExisting: false
    secretKey: autowizard
    secretName: autowizard
  elasticsearch:
    useExisting: false
    secretKey: password
    secretName: elastic-credentials
  postgresql:
    useExisting: false
    secretKey: postgresql-pass
    secretName: postgresql-pass
  redis:
    useExisting: false
    secretKey: redis-password
    secretName: redis-pass

zammadConfig:
  elasticsearch:
    # enable/disable elasticsearch chart dependency
    enabled: true
    # host env var is only used when zammadConfig.elasticsearch.enabled is false
    host: zammad-master
    initialisation: false
    pass: ""
    port: 9200
    reindex: true
    schema: http
    user: ""
  memcached:
    # enable/disable memcached chart dependency
    enabled: true
    # host env var is only used when zammadConfig.memcached.enabled is false
    host: zammad-memcached
    port: 11211
  nginx:
    extraHeaders:
      - 'X-Forwarded-Proto "https"'
    websocketExtraHeaders:
      - 'X-Forwarded-Proto "https"'
    knowledgeBaseUrl: ""
    livenessProbe:
      httpGet:
        path: /
        port: 8080
      initialDelaySeconds: 30
      successThreshold: 1
      failureThreshold: 50
      timeoutSeconds: 5
      periodSeconds: 10
    readinessProbe:
      httpGet:
        path: /
        port: 8080
      initialDelaySeconds: 30
      successThreshold: 1
      failureThreshold: 50
      timeoutSeconds: 5
      periodSeconds: 10
    resources: 
      requests:
        cpu: 50m
        memory: 32Mi
      limits:
        cpu: 200m
        memory: 256Mi
  postgresql:
    # enable/disable postgresql chart dependency
    enabled: false
    # needs to be the same as the postgresql.postgresqlPassword
    db: zammad
    # host env var is only used when postgresql.enabled is false
    host: pg-primary.dbs.svc.cluster.local
    pass: "gcIzViXCsBIVeJCSea49YsfcUqRlLLD9"
    # needs to be the same as the postgresql.postgresqlDatabase
    port: 5432
    # needs to be the same as the postgresql.postgresqlUsername
    user: zammad
  railsserver:
    livenessProbe:
      httpGet:
        path: /
        port: 3000
      initialDelaySeconds: 30
      successThreshold: 1
      failureThreshold: 50
      timeoutSeconds: 5
      periodSeconds: 10
    readinessProbe:
      httpGet:
        path: /
        port: 3000
      initialDelaySeconds: 30
      successThreshold: 1
      failureThreshold: 50
      timeoutSeconds: 5
      periodSeconds: 10
    resources: {}
      # requests:
      #   cpu: 100m
      #   memory: 512Mi
      # limits:
      #   cpu: 200m
      #   memory: 1024Mi
    trustedProxies: "['127.0.0.1', '::1']"
    webConcurrency: 0
  redis:
    # enable/disable redis chart dependency
    enabled: true
    host: "zammad-redis-master"
    # needs to be the same as the redis.auth.password
    pass: zammad
    port: 6379
  scheduler:
    resources: 
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        cpu: 200m
        memory: 512Mi
  websocket:
    livenessProbe:
      tcpSocket:
        port: 6042
      initialDelaySeconds: 10
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 50
      timeoutSeconds: 5
    readinessProbe:
      tcpSocket:
        port: 6042
      initialDelaySeconds: 10
      periodSeconds: 10
      successThreshold: 1
      failureThreshold: 50
      timeoutSeconds: 5
    resources: 
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        cpu: 200m
        memory: 512Mi
  initContainers:
    volumePermissions:
      resources: {}
        # requests:
        #   cpu: 100m
        #   memory: 256Mi
        # limits:
        #   cpu: 200m
        #   memory: 512Mi
    zammad:
      resources: {}
        # requests:
        #   cpu: 100m
        #   memory: 256Mi
        # limits:
        #   cpu: 200m
        #   memory: 512Mi
    postgresql:
      resources: {}
        # requests:
        #   cpu: 100m
        #   memory: 256Mi
        # limits:
        #   cpu: 200m
        #   memory: 512Mi
    elasticsearch:
      resources: {}
        # requests:
        #   cpu: 100m
        #   memory: 256Mi
        # limits:
        #   cpu: 200m
        #   memory: 512Mi

# additional environment vars added to all zammad services
extraEnv:
  - name: VIRTUAL_HOST
    value: "zammad.sapian.cloud"
  - name: NGINX_SERVER_SCHEME
    value: "https"
# autowizard config
# if a token is used the url hast to look like: http://zammad/#getting_started/auto_wizard/your_token_here
autoWizard:
  enabled: false
  # string with the autowizard config as json
  config: |
    {
      "Token": "maish0aiChaingu5le3wou2noogheifaebeaghaen3fai0guWourau",
      "TextModuleLocale": {
        "Locale": "en-us"
      },
      "Users": [
        {
          "login": "srojo@sapian.com.co",
          "firstname": "sapian",
          "lastname": "Admin",
          "email": "srojo@sapian.com.co",
          "organization": "Sapian",
          "password": "geiThohsoh7eiph7AAaa"
        }
      ],
      "Settings": [
        {
          "name": "product_name",
          "value": "Zammad"
        },
        {
          "name": "system_online_service",
          "value": true
        }
      ],
      "Organizations": [
        {
          "name": "Sapian"
        }
      ]
    }

podAnnotations: {}
  # my-annotation: "value"

volumePermissions:
  enabled: false
  image:
    repository: alpine
    tag: "3.14"
    pullPolicy: IfNotPresent

# Configuration for persistence
persistence:
  enabled: true
  ## A manually managed Persistent Volume and Claim
  ## If defined, PVC must be created manually before volume will be bound
  ## The value is evaluated as a template, so, for example, the name can depend on .Release or .Chart
  ##
  # existingClaim:
  accessModes:
    - ReadWriteOnce
  storageClass: ""
  size: 15Gi
  annotations: {}

nodeSelector: {}
tolerations: []
affinity: {}

# service account configurations
serviceAccount:
  # Specifies whether a service account should be created
  create: false
  # Annotations to add to the service account
  annotations: {}
  # The name of the service account to use.
  # If not set and create is true, a name is generated using the fullname template
  name: ""

# RBAC configuration for scoping resources
# Role binding is used for accessing the pod security policy configured
# below
rbac:
  # Control whether RBAC resources are created
  create: false

# Ref: https://kubernetes.io/docs/concepts/policy/pod-security-policy/
podSecurityPolicy:
  enabled: false
  # Create PSP
  create: false
  # Annotations to add to PSP. Only applicable if create is true
  annotations: {}
  # The name of the PSP to use. Only applicable if create is false
  name: ""

# initContainers:
#   - name: s3-restore
#     image: some-aws-s3-restore:latest
#     env:
#       - name: AWS_DEFAULT_REGION
#         value: "eu-central-1"
#       - name: AWS_ACCESS_KEY_ID
#         value: "xxxxxxxxxxxx"
#       - name: AWS_SECRET_ACCESS_KEY
#         value: "xxxxxxxxxxxx"
#       - name: SYNC_DIR
#         value: "/opt/zammad"
#       - name: AWS_SYNC_BUCKET
#         value: "some-backup-bucket"
#     volumeMounts:
#       - name: help-zammad
#         mountPath: /opt/zammad

# sidecars:
#   - name: s3-backup
#     image: some-aws-s3-backup:latest
#     env:
#       - name: AWS_DEFAULT_REGION
#         value: "eu-central-1"
#       - name: AWS_ACCESS_KEY_ID
#         value: "xxxxxxxxxxxx"
#       - name: AWS_SECRET_ACCESS_KEY
#         value: "xxxxxxxxxxxx"
#       - name: SYNC_DIR
#         value: "/opt/zammad"
#       - name: AWS_SYNC_BUCKET
#         value: "some-backup-bucket"
#       - name: AWS_SYNC_SCHEDULE
#         value: "0 * * * *"
#     volumeMounts:
#       - name: help-zammad
#         mountPath: /opt/zammad

# dependency charts config

# Settings for the elasticsearch subchart
elasticsearch:
  image: "zammad/zammad-docker-compose"
  imageTag: "zammad-elasticsearch-5.2.1-6"
  clusterName: zammad
  replicas: 1
  # Workaround to get helm test to work in GitHub action CI
  # the [ES chart](https://github.com/elastic/helm-charts/tree/master/elasticsearch)
  # default would be: "wait_for_status=green&timeout=1s"
  # see: <https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-health.html#request-params>
  clusterHealthCheckParams: "wait_for_status=yellow&timeout=1s"
  resources: 
    requests:
      cpu: "250m"
      memory: "2Gi"
    limits:
      cpu: "1000m"
      memory: "2Gi"
  initResources: 
    limits:
      cpu: "25m"
      # memory: "128Mi"
    requests:
      cpu: "25m"
      memory: "128Mi"
  sidecarResources: 
    limits:
      cpu: "25m"
      # memory: "128Mi"
    requests:
      cpu: "25m"
      memory: "128Mi"

# settings for the memcached subchart
memcached:
  replicaCount: 1
  resources:
    requests:
      cpu: 50m
      memory: 64Mi
    limits:
      cpu: 100m
      memory: 128Mi

# settings for the postgres subchart
postgresql:
  enabled: false
  postgresqlUsername: zammad
  postgresqlPassword: zammad
  postgresqlDatabase: zammad_production
  resources: {}
    # requests:
    #   cpu: 250m
    #   memory: 256Mi
    # limits:
    #   cpu: 500m
    #   memory: 512Mi

# settings for the redis subchart
redis:
  architecture: standalone
  auth:
    password: zammad
  master:
    resources: {}
    # limits:
    #   cpu: 250m
    #   memory: 256Mi
    # requests:
    #   cpu: 250m
    #   memory: 256Mi