You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
347 lines
7.8 KiB
347 lines
7.8 KiB
# Default values for codimd.
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
|
|
# storageClass:
|
|
# nameOverride:
|
|
# fullnameOverride:
|
|
|
|
image:
|
|
# https://quay.io/repository/hedgedoc/hedgedoc?tab=tags
|
|
registry: "quay.io"
|
|
repository: "hedgedoc/hedgedoc"
|
|
# When you use export pdf with CJK character, please change the tag with postfix `-cjk`.
|
|
# for example 2.2.0-cjk
|
|
tag: "1.9.0-alpine"
|
|
pullPolicy: IfNotPresent
|
|
pullSecrets: []
|
|
# - myRegistryKeySecretName
|
|
|
|
##
|
|
## PostgreSQL chart configuration
|
|
##
|
|
## Reference: https://github.com/bitnami/charts/blob/master/bitnami/postgresql/values.yaml
|
|
##
|
|
## If you want to use external database, just set postgresql.enabled to false
|
|
##
|
|
postgresql:
|
|
enabled: false
|
|
volumePermissions:
|
|
enabled: false
|
|
postgresqlUsername: codimd
|
|
postgresqlPassword: changeme
|
|
postgresqlDatabase: codimd
|
|
##
|
|
## MariaDB chart configuration
|
|
##
|
|
## Reference: https://github.com/bitnami/charts/blob/master/bitnami/mariadb/values.yaml
|
|
##
|
|
## If you prefer MariaDB, we also supported.
|
|
##
|
|
mariadb:
|
|
enabled: false
|
|
volumePermissions:
|
|
enabled: true
|
|
db:
|
|
user: codimd
|
|
password: changeme
|
|
name: codimd
|
|
master:
|
|
persistence:
|
|
enabled: true
|
|
replication:
|
|
enabled: false
|
|
|
|
|
|
##
|
|
## Kubernetes service
|
|
## use NodePort for minikube
|
|
## other environment use LoadBalancer or ClusterIP
|
|
##
|
|
service:
|
|
annotations: {}
|
|
type: "ClusterIP"
|
|
port: 80
|
|
# externalTrafficPolicy:
|
|
# loadBalancerIP:
|
|
|
|
##
|
|
## Ingress configuration
|
|
##
|
|
Ingress:
|
|
enabled: false
|
|
annotations:
|
|
kubernetes.io/ingress.class: traefik
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
hosts:
|
|
- host: hedgedoc.sapian.cloud
|
|
paths:
|
|
- /
|
|
tls:
|
|
- secretName: hedgedoc-sapian-cloud-le-tls-le
|
|
hosts:
|
|
- hedgedoc.sapian.cloud
|
|
|
|
ingressRoute:
|
|
enabled: true
|
|
annotations: {}
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
host: hedgedoc.sapian.cloud
|
|
tls:
|
|
enabled: true
|
|
|
|
|
|
##
|
|
## CodiMD application configuration
|
|
##
|
|
codimd:
|
|
##
|
|
## Affinity for pod assignment
|
|
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
|
|
##
|
|
affinity:
|
|
nodeAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
nodeSelectorTerms:
|
|
- matchExpressions:
|
|
- key: sapian-k3s-role
|
|
operator: In
|
|
values:
|
|
- server
|
|
##
|
|
## Tolerations for pod assignment. Evaluated as a template.
|
|
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
|
##
|
|
tolerations: {}
|
|
##
|
|
## Node labels for pod assignment. Evaluated as a template.
|
|
## ref: https://kubernetes.io/docs/user-guide/node-selection/
|
|
##
|
|
nodeSelector: {}
|
|
##
|
|
## Pod annotations
|
|
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
|
|
##
|
|
podAnnotations: {}
|
|
##
|
|
## security context
|
|
##
|
|
securityContext:
|
|
runAsGroup: 1500
|
|
runAsUser: 1500
|
|
fsGroup: 1500
|
|
runAsNonRoot: true
|
|
|
|
##
|
|
## connection setting
|
|
##
|
|
connection:
|
|
## if you doesn't using ingress, you can setup domain for your CodiMD instances
|
|
domain: hedgedoc.sapian.cloud
|
|
## if you want to add port number on your url
|
|
urlAddPort: false
|
|
## if you use load balancer or setup TLS on ingress
|
|
protocolUseSSL: true
|
|
|
|
##
|
|
## External database configuration
|
|
## if you want to use external database
|
|
## database type only support mysql and postgres
|
|
##
|
|
database:
|
|
type: postgres
|
|
host: pg-bk-primary.dbs.svc.cluster.local
|
|
port: 5432
|
|
username: hedgedoc
|
|
password: "326jmqGd2Yhknppq"
|
|
databaseName: hedgedoc
|
|
|
|
##
|
|
## Image upload store
|
|
##
|
|
imageUpload:
|
|
storeType: s3
|
|
# imgur:
|
|
# clientId:
|
|
# azure:
|
|
# connectionString:
|
|
# container:
|
|
# lutim:
|
|
# url:
|
|
# minio:
|
|
# endpoint: ceph.sapian.cloud
|
|
# secure: true
|
|
# port: 443
|
|
# accessKey: OBIKJR1I367AQK42TY7F
|
|
# secretKey: iVEkSXUPdwjuBiLBe2KlEV59eJFcNqTMs02QC5Ma
|
|
# bucket: sapian-hackmd-public-bucket
|
|
s3:
|
|
# endpoint:
|
|
region: us-east-1
|
|
accessKeyId: AKIAVWWRY6JXNYCDBLO2
|
|
secretKey: uARHbdpvNwJVFPqS5//KMNlrVIBX0Gv1yI40proG
|
|
bucket: hedgedoc.sapian.cloud
|
|
imageStorePersistentVolume:
|
|
enabled: false
|
|
size: '10Gi'
|
|
storageClass: ""
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
volumeMode: Filesystem
|
|
|
|
## for advanced used, manually setup environment for used
|
|
extraEnvironmentVariables:
|
|
# CMD_S3_BUCKET: sapian-hackmd-public-bucket
|
|
CMD_OAUTH2_BASEURL: https://hedgedoc.sapian.cloud
|
|
CMD_OAUTH2_SCOPE: id email
|
|
# CMD_LOGLEVEL: info
|
|
|
|
## automatically check new version
|
|
versionCheck: true
|
|
|
|
##
|
|
## about security setting
|
|
##
|
|
security:
|
|
useCDN: 'false'
|
|
# session secret, please change this value
|
|
sessionSecret: 'chiigh7hoqu7foceedoh9iethaiYoo6i'
|
|
sessionLife: '1209600000'
|
|
## HSTS setting
|
|
hstsEnabled: 'true'
|
|
hstsMaxAge: '31536000'
|
|
hstsIncludeSubdomain: 'false'
|
|
hstsPreload: 'true'
|
|
## CSP setting
|
|
cspEnabled: 'true'
|
|
# cspReportUri:
|
|
## setup allow origin
|
|
# allowOrigin:
|
|
## use gravatar.com as user gravatar
|
|
allowGravatar: 'true'
|
|
|
|
##
|
|
## for tooBusy block user when server event loop lag more than ? ms
|
|
##
|
|
responseMaxLag: '70'
|
|
|
|
##
|
|
## setting about note creation
|
|
##
|
|
noteCreation:
|
|
freeUrlEnabled: 'true'
|
|
freeUrlForbiddenNoteIds: 'robots.txt,favicon.ico,api'
|
|
defaultPermission: 'editable'
|
|
##
|
|
## setting about note permission
|
|
##
|
|
notePermission:
|
|
allowAnonymousEdit: true
|
|
allowAnonymousView: true
|
|
##
|
|
## allow export note to pdf
|
|
##
|
|
allowPDFExport: true
|
|
##
|
|
## setting about markdown
|
|
##
|
|
markdown:
|
|
# plantUMLServer:
|
|
useHardBreak: true
|
|
linkifyHeaderStyle: 'keep-case'
|
|
|
|
##
|
|
## User Authentication Methods
|
|
##
|
|
authentication:
|
|
##
|
|
## authentication by Email and Password
|
|
local:
|
|
enabled: true una
|
|
allowRegister: false
|
|
bitbucket:
|
|
enabled: false
|
|
key:
|
|
secret:
|
|
dropbox:
|
|
enabled: false
|
|
appKey:
|
|
appSecret:
|
|
facebook:
|
|
enabled: false
|
|
clientId:
|
|
secret:
|
|
github:
|
|
enabled: false
|
|
clientId: d594d2c0bd7591a7fe54
|
|
secret: 33ed3e2a46ec550ab509bcf876bbc2a0c8029bea
|
|
## provide enterprise url if you use GitHub Enterprise Version
|
|
enterpriseUrl:
|
|
gitlab:
|
|
enabled: false
|
|
domain:
|
|
scope:
|
|
applicationId:
|
|
secret:
|
|
google:
|
|
enabled: false
|
|
clientId:
|
|
secret:
|
|
hostedDomain:
|
|
ldap:
|
|
enabled: false
|
|
providerName:
|
|
url:
|
|
tlsCA:
|
|
bindDN:
|
|
bindCredentials:
|
|
searchBase:
|
|
searchFilter:
|
|
searchAttributes:
|
|
attributes:
|
|
id:
|
|
username:
|
|
mattermost:
|
|
enabled: false
|
|
domain:
|
|
clientId:
|
|
secret:
|
|
oauth2:
|
|
enabled: true
|
|
providerName: sapian.cloud
|
|
domain: sapian.com.co
|
|
clientId: hedgedoc-sapian-cloud
|
|
secret: 681028a3-d4a6-4eb1-ad43-8540c8fd79ad
|
|
authorizationUrl: https://accounts.sapian.cloud/auth/realms/sapian.com.co/protocol/openid-connect/auth
|
|
tokenUrl: https://accounts.sapian.cloud/auth/realms/sapian.com.co/protocol/openid-connect/token
|
|
userProfileUrl: https://accounts.sapian.cloud/auth/realms/sapian.com.co/protocol/openid-connect/userinfo
|
|
scope:
|
|
attributes:
|
|
username: preferred_username
|
|
displayName: name
|
|
email: email
|
|
openID:
|
|
enabled: false
|
|
saml:
|
|
enabled: false
|
|
idpSSOUrl:
|
|
idpCert:
|
|
issuer:
|
|
identifierFormat:
|
|
disableRequestedAuthnContext:
|
|
groupAttribute:
|
|
externalGroups:
|
|
requiredGroups:
|
|
attributes:
|
|
id:
|
|
username:
|
|
email:
|
|
twitter:
|
|
enabled:
|
|
consumerKey:
|
|
comsumerSecret:
|