grafana:
  enabled: false

defaultRules:
  rules:
    kubeProxy: false

alertmanager:
  ingress:
    enabled: true
    ingressClassName: traefik
    annotations:
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
      traefik.ingress.kubernetes.io/router.middlewares: default-authentik@kubernetescrd
    hosts:
      - alertmanager.brunner.ninja
    paths:
      - /
    pathType: ImplementationSpecific

  alertmanagerSpec:
    externalUrl: https://alertmanager.brunner.ninja
    routePrefix: /

  config:
    global:
      resolve_timeout: 5m
      smtp_smarthost: smtp-relay.gmail.com:587
      smtp_from: Cluster Alerts <alerts@brunner.ninja>
      smtp_hello: brunner.ninja
      smtp_require_tls: true
    route:
      group_by:
        - namespace
        - alertname
      group_wait: 30s
      group_interval: 5m
      repeat_interval: 6h
      receiver: cluster-email
      routes:
        - receiver: "null"
          matchers:
            - alertname =~ "Watchdog|InfoInhibitor"
        - receiver: "null"
          matchers:
            - severity = "info"
        - receiver: cluster-email
          matchers:
            - severity = "critical"
          repeat_interval: 2h
          continue: true
        - receiver: cluster-email
          matchers:
            - severity != "critical"
          continue: true
        - receiver: cluster-matrix
    receivers:
      - name: "null"
      - name: cluster-email
        email_configs:
          - to: Daniel Brunner <daniel@brunner.ninja>
            send_resolved: true
            headers:
              Subject: >-
                [{{ .Status | toUpper }}] {{ .CommonLabels.alertname }}{{ if .CommonLabels.namespace }} in {{ .CommonLabels.namespace }}{{ end }}
      - name: cluster-matrix
        webhook_configs:
          - url: http://matrix-alertmanager-receiver.prometheus.svc.cluster.local:12345/alerts/cluster
            send_resolved: true

prometheus:
  ingress:
    enabled: true
    hosts:
      - prometheus.brunner.ninja
    annotations:
      kubernetes.io/ingress.class: "traefik"
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
  prometheusSpec:
    retention: "15d"
    storageSpec:
      volumeClaimTemplate:
        spec:
          storageClassName: rook-ceph-block
          accessModes: ["ReadWriteOnce"]
          resources:
            requests:
              storage: 50Gi
    serviceMonitorSelectorNilUsesHelmValues: false
    serviceMonitorSelector: {}
    ruleSelectorNilUsesHelmValues: false
    ruleSelector: {}
    additionalScrapeConfigs:
      - job_name: external-immich-8082
        metrics_path: /metrics
        static_configs:
          - targets:
              - 192.168.0.2:8082
            labels:
              endpoint: metrics
              namespace: prometheus
              service: external-immich-8082
      - job_name: external-immich-8083
        metrics_path: /metrics
        static_configs:
          - targets:
              - 192.168.0.2:8083
            labels:
              endpoint: metrics
              namespace: prometheus
              service: external-immich-8083