# values.yaml.example — zddc-server-dev
#
# Copy to values.yaml (or pass via --values) and customize for your
# environment. Same as the prod chart's example, but defaults are
# tuned for active development:
#
#   - gitRef defaults to "main" (rebuilt on every pod restart)
#   - ZDDC_LOG_LEVEL=debug (every request's full header map gets logged
#     — this includes auth tokens and cookies; debug builds belong in
#     trusted/private namespaces only)
#   - Faster liveness/readiness probes
#   - Smaller resource limits (single-developer test cluster)
#
# Contains NO secrets — see helm/zddc-server-prod/values.yaml.example
# for the secrets-management note.

zddc:
  gitRepo: https://codeberg.org/VARASYS/ZDDC.git
  gitRef:  main             # tracks the latest commit; rebuilt on pod restart

  env:
    rootPath: /srv
    addr: ":8080"
    emailHeader: X-Auth-Request-Email
    # Empty (default) disables CORS — fine for embedded-tools / same-origin.
    # Dev typically keeps localhost in here for the iterate-on-tool-builds
    # workflow where you load a tool from `./dev-server start` (8000) and
    # point it at this server. Add other tool-host origins as needed.
    corsOrigin: "http://localhost:8000"
    logLevel: debug         # full request headers logged; sensitive!
    indexPath: ".archive"

    # Skip ACL enforcement entirely. Useful in trusted-LAN dev clusters
    # where authentication isn't needed and you want to iterate without
    # configuring an upstream auth proxy. Default false.
    noAuth: false

  # Token system: enabled automatically — tokens persist at
  # <ZDDC_ROOT>/.zddc.d/tokens/ on the data PVC. Sign in via your
  # cluster's auth proxy and visit /.tokens to issue one.

data:
  pvcName: zddc-root-dev    # name of an existing PVC in your dev namespace
  subPath: ""

service:
  type: ClusterIP
  port: 8080

ingress:
  enabled: false
  className: ""
  host: zddc-dev.example.com
  tls:
    enabled: false
    secretName: zddc-dev-tls

# Smaller than prod — dev clusters are usually resource-constrained.
resources:
  requests:
    cpu: 50m
    memory: 64Mi
  limits:
    cpu: 250m
    memory: 256Mi

# Dev runs single-replica. The init container always pulls main HEAD,
# so two replicas would race on different SHAs.
replicaCount: 1

buildImage:
  repository: docker.io/golang
  tag: 1.24-alpine

runtimeImage:
  repository: docker.io/alpine
  tag: "3.19"

imagePullSecrets: []