database:
  protocol: postgresql
  host: postgresql-hl.postgresql.svc.cluster.local
  port: 5432
  tls: false
  tlsMode: require
  name: ${ database }
  %{ if database_root_username != null }
  root:
    user: ${ database_root_username }
  %{ endif }
  existingSecret: postgresql-auth
  user: ${ database_username }

kickstart:
  enabled: true
  data:
    kickstart.json: |
      ${kickstart_json}

search:
  # search.engine -- Defines backend for fusionauth search capabilities. Valid values for engine are 'elasticsearch' or 'database'.
  engine: database

app:
  # app.memory -- Configures the amount of memory Java can use
  memory: 256M
  # app.runtimeMode -- Configures runtime mode for fusionauth. Should be 'development' or 'production'
  # learn more about the difference here: https://fusionauth.io/docs/v1/tech/reference/configuration
  runtimeMode: production
  # app.silentMode -- Configures silent mode for fusionauth. Should be 'true' or 'false'
  # learn more about silent mode here: https://fusionauth.io/docs/get-started/download-and-install/silent-mode
  # silent-mode minimizes downtime during upgrades: https://fusionauth.io/docs/operate/deploy/upgrade#downtime-and-database-migrations
  silentMode: true

ingress:
  enabled: true
  ingressClassName: traefik
  annotations:
      kubernetes.io/ingress.class: traefik
      #cert-manager.io/cluster-issuer: letsencrypt
      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
      traefik.ingress.kubernetes.io/router.middlewares: default-redirect-to-https@kubernetescrd,default-preserve-host-headers@kubernetescrd
  hosts:
    - ${ service_uri }
  paths:
    - path: /
      pathType: Prefix
  tls:
    - hosts:
        - ${ service_uri }
      secretName: fusionauth-tls