imagePullPolicy: Always
web:
  replicaCount: 1
  image:
    repository: 
    tag: 
  podAnnotations: {}
  securityContext: 
    capabilities:
      drop:
      - ALL
    readOnlyRootFilesystem: true
    runAsNonRoot: true
    runAsUser: 1000

  service: 
    type: ClusterIP
    port: 8080

  resources: 
    requests: 
      cpu: 0.3
      memory: 128Mi
    limits: 
      cpu: 0.8
      memory: 512Mi

  livenessProbe:
    httpGet:
      path: /health
      port: web
  readinessProbe:
    httpGet:
      path: /health
      port: web
  persistence:
    storageClassName: nfs-client
    accessMode: ReadWriteMany
    size: 1Gi

  default: 
    avatar: ""
    cover: ""    

backend:
  image:
    repository:
    tag:
  podAnnotations: {}
  securityContext: 
    capabilities:
      drop:
      - ALL
    readOnlyRootFilesystem: true
    runAsNonRoot: true
    runAsUser: 1000
  service: 
    type: ClusterIP
    port: 8080
  resources: 
    requests: 
      cpu: 0.1
      memory: 256Mi
    limits: 
      cpu: 0.5
      memory: 512Mi
  livenessProbe:
  httpGet:
    path: /health
    port: backend
  readinessProbe:
    httpGet:
      path: /health
      port: backend

secrets: 
  JWT_SECRET: ""
  JWT_ISSUER: ""
  JWT_SUBJECT: ""
  JWT_EXPIRE: ""
  DB_USER_NAME: ""
  DB_USER_PWD: ""
  DB_SU_USER_PWD: ""

# mail default using smtps, if you want to use another, you might change configmap to suit mail-server
  MAIL_PORT: "456"
  MAIL_HOST: "smtp.163.com"
  MAIL_USERNAME: ""
  MAIL_USER_PWD: ""


postgresql:
  enabled: false
  auth:
    postgresPassword: ""
    username: ""
    password: ""
    database: ""
  image:
    registry: docker.io
    repository: bitnamilegacy/postgresql
    tag: 17.6.0-debian-12-r4
  primary:
    initdb:
      scriptsConfigMap: "blog-db-sql"
      user: ""
      password: ""
    persistence:
      storageClass: ""
      size: 5Gi
  global:
    security: 
      allowInsecureImages: true


# This block is for setting up the ingress for more information can be found here: https://kubernetes.io/docs/concepts/services-networking/ingress/
ingress:
  enabled: false
  className: ""
  annotations: {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  hosts:
    - host: chart-example.local
      paths:
        - path: /
          pathType: ImplementationSpecific
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local