# Latest chart still bundles an older application. Remove this tag-only
# override when a newer chart supplies this release or later.
image:
  tag: "1.20.26"
strategy:
  type: Recreate
extraPodLabels:
  app.kubernetes.io/component: server
nodeSelector:
  kubernetes.io/hostname: arschrock
  media.brunner.ninja/multimedia-ready: "true"
tolerations:
- key: node-role.kubernetes.io/control-plane
  operator: Exists
  effect: NoSchedule
serviceAccount:
  name: copyparty
  automount: false
containerSecurityContext:
  allowPrivilegeEscalation: false
  runAsNonRoot: true
  capabilities:
    drop: [ALL]
podSecurityContext:
  seccompProfile:
    type: RuntimeDefault
resources:
  requests:
    cpu: 100m
    memory: 256Mi
    ephemeral-storage: 128Mi
  limits:
    cpu: null
    memory: 16Gi
    ephemeral-storage: 1Gi
app:
  env:
  - name: XDG_CONFIG_HOME
    value: /state
  args: []
configMap:
  data:
    config.conf: |
      [global]
        name: Komposthaufen
        p: 3923
        http-only
        rp-loc: /komposthaufen
        xff-src: 10.0.0.0/16
        xff-hdr: x-real-ip
        rproxy: 1
        hist: /state/hist
        e2dsa
        no-hash: .*
        re-maxage: 3600
        no-del
        no-mv
        unpost: 0
        xvol
        no-logues
        no-readme
        no-html
        no-ups-page
        no-up-list
        html-head: @/cfg/readonly-ui.html
      [/]
        /komposthaufen
        accs:
          r: *
    readonly-ui.html: |
      <style>
      #ops a[data-dest="up2k"], #ops a[data-dest="bup"],
      #ops a[data-dest="mkdir"], #ops a[data-dest="new_md"],
      #ops a[data-dest="unpost"], #op_up2k, #op_bup, #op_mkdir,
      #op_new_md, #op_unpost { display: none !important; }
      </style>
volumeConfig:
  appData:
    volumeMount:
      mountPath: /state
    persistence:
      enabled: true
      pvcName: copyparty-index
      size: 10Gi
      storageClass: rook-ceph-block
      volume:
        persistentVolumeClaim:
          claimName: copyparty-index
  userData:
    volumeMount:
      mountPath: /komposthaufen
      readOnly: true
      recursiveReadOnly: Enabled
    volume:
      emptyDir: null
      hostPath:
        path: /komposthaufen
        type: Directory
  copypartyConfig:
    volumeMount:
      readOnly: true
    volume:
      secret: null
      configMap:
        name: copyparty-config
readinessProbe:
  httpGet:
    path: /komposthaufen/?h
  timeoutSeconds: 5
livenessProbe:
  httpGet:
    path: /komposthaufen/?h
    port: http
  initialDelaySeconds: 90
  periodSeconds: 30
  timeoutSeconds: 10
  failureThreshold: 5