helmrelease.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: obico
  namespace: obico
spec:
  chart:
    spec:
      chart: obico
      version: 0.6.0
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        namespace: flux-system
        name: gabe565
  interval: 1h
  driftDetection:
    mode: enabled
  values:
    server:
      image:
        repository: ghcr.io/gabe565/obico/web
        tag: latest@sha256:90f1ff9c11cf897bfdc07118e5190799e2082e194ef17e64ed67f5a74fd1a092
      env:
        DJANGO_SECRET_KEY: ${django_secret_key}
        EMAIL_HOST: ${smtp_hostname}
        EMAIL_HOST_USER: ${smtp_username}
        EMAIL_HOST_PASSWORD: ${email_host_password}
        DEFAULT_FROM_EMAIL: ${smtp_username}
        EMAIL_PORT: '587'
        EMAIL_USE_TLS: 'True'
        TELEGRAM_BOT_TOKEN: ${telegram_bot_token}

      podLabels:
        policy.gabe565.com/egress-namespace: "true"
        policy.gabe565.com/egress-world: "true"
        policy.gabe565.com/ingress-ingress: "true"

      persistence:
        data:
          enabled: true
          storageClass: longhorn-ssd
          accessMode: ReadWriteOnce
          size: 512M
        media:
          enabled: true
          storageClass: nfs-client
          accessMode: ReadWriteMany
          size: 8Gi

      ingress:
        main:
          enabled: true
          annotations:
            nginx.ingress.kubernetes.io/proxy-body-size: 64m
          hosts:
            - host: ${app_url}
              paths:
                - path: /
          tls:
            - secretName: ${certificate_name}
              hosts:
                - ${app_url}

    ml-api:
      image:
        repository: ghcr.io/gabe565/obico/ml-api
        tag: latest@sha256:477a8d29c5efb25f845feef909cb530e2f00235de2809343a89b3cf61974ba36
      podLabels:
        policy.gabe565.com/egress-world: "true"
        policy.gabe565.com/ingress-namespage: "true"

    redis:
      master:
        podLabels:
          policy.gabe565.com/ingress-namespace: "true"