global:
  namespace: my-apps
  imagePullSecrets: []

# Backend configuration
backend:
  name: backend
  replicaCount: 2
  image:
    repository: harbor.dvirlabs.com/my-apps/my-recipes-backend
    pullPolicy: IfNotPresent
    tag: "latest"
  
  service:
    type: ClusterIP
    port: 8000
    targetPort: 8000
  
  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      cpu: 500m
      memory: 512Mi
  
  env:
    PYTHONUNBUFFERED: "1"
  
  # Secrets are created in db-secret.yaml
  # These are passed via envFrom secretRef

  ingress:
    enabled: true
    className: "alb"
    annotations:
      alb.ingress.kubernetes.io/scheme: internet-facing
      alb.ingress.kubernetes.io/target-type: ip
      alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
      alb.ingress.kubernetes.io/certificate-arn: ""  # Set in project-specific values
    hosts:
      - host: api-my-recipes.dvirlabs.com
        paths:
          - path: /
            pathType: Prefix
    tls:
      - secretName: api-my-recipes-tls
        hosts:
          - api-my-recipes.dvirlabs.com

# Frontend configuration
frontend:
  name: frontend
  replicaCount: 2
  image:
    repository: harbor.dvirlabs.com/my-apps/my-recipes-frontend
    pullPolicy: IfNotPresent
    tag: "latest"
  
  service:
    type: ClusterIP
    port: 80
    targetPort: 80
  
  env:
    API_BASE: "https://api-my-recipes.dvirlabs.com"
  
  resources:
    requests:
      cpu: 50m
      memory: 64Mi
    limits:
      cpu: 200m
      memory: 256Mi

  ingress:
    enabled: true
    className: "alb"
    annotations:
      alb.ingress.kubernetes.io/scheme: internet-facing
      alb.ingress.kubernetes.io/target-type: ip
      alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
      alb.ingress.kubernetes.io/certificate-arn: ""  # Set in project-specific values
    hosts:
      - host: my-recipes.dvirlabs.com
        paths:
          - path: /
            pathType: Prefix
    tls:
      - secretName: my-recipes-tls
        hosts:
          - my-recipes.dvirlabs.com
  externalUrl: "https://my-recipes.dvirlabs.com"

# PostgreSQL configuration
postgres:
  name: db
  image:
    repository: postgres
    tag: "16-alpine"
    pullPolicy: IfNotPresent
  
  user: recipes_user
  password: recipes_password
  database: recipes_db
  port: 5432
  
  service:
    type: ClusterIP
    port: 5432
    targetPort: 5432
  
  persistence:
    enabled: true
    accessMode: ReadWriteOnce
    storageClass: "nfs-client"
    size: 10Gi
  
  resources:
    requests:
      cpu: 100m
      memory: 256Mi
    limits:
      cpu: 1000m
      memory: 1Gi

# OAuth Configuration
oauth:
  google:
    clientId: "143092846986-hsi59m0on2c9rb5qrdoejfceieao2ioc.apps.googleusercontent.com"
    clientSecret: "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"
    redirectUri: "https://api-my-recipes.dvirlabs.com/auth/google/callback"
  
  azure:
    clientId: "db244cf5-eb11-4738-a2ea-5b0716c9ec0a"
    clientSecret: "Zad8Q~qRBxaQq8up0lLXAq4pHzrVM2JFGFJhHaDp"
    tenantId: "consumers"
    redirectUri: "https://api-my-recipes.dvirlabs.com/auth/azure/callback"

# Email Configuration
email:
  smtpHost: "smtp.gmail.com"
  smtpPort: "587"
  smtpUser: "dvirlabs@gmail.com"
  smtpPassword: "agaanrhbbazbdytv"
  smtpFrom: "dvirlabs@gmail.com"

# S3 Backup Configuration
s3:
  endpoint: "https://s3.amazonaws.com"  # Can be overridden for specific regions
  accessKey: ""  # Set this in project-specific values.yaml
  secretKey: ""  # Set this in project-specific values.yaml
  bucketName: ""  # Set this in project-specific values.yaml
  region: "us-east-1"  # Set this in project-specific values.yaml
  backupInterval: "weekly"  # Options: test (1 min), daily, weekly

# Admin User Configuration
admin:
  username: "admin"
  email: "admin@example.com"
  password: "admin123"  # Change this in production!
  firstName: "Admin"
  lastName: "User"
  displayName: "Admin User"

# Ingress configuration
ingress:
  enabled: false  # Individual frontend/backend ingress resources handle routing instead
  className: "nginx"
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
  hosts:
    - host: my-recipes.dvirlabs.com
      paths:
        - path: /
          pathType: Prefix
          backend: frontend
  tls:
    - secretName: recipes-tls
      hosts:
        - my-recipes.dvirlabs.com