zitadel:
  masterkeySecretName: "zitadel"
  configmapConfig:
    ExternalSecure: false
    ExternalDomain: ${ external_domain }
    TLS:
      Enabled: false
    #ExternalPort: 443
    #ExternalSecurePort: 443
    #ExternalPathPrefix: ${ external_path_prefix }
    #ExternalTLS: false
    #ExternalTLSAllowInsecure: false
    #ExternalTLSAllowInsecureSkipVerify: false
    Database:
      Postgres:
        Host: postgresql-hl.postgresql.svc.cluster.local
        Port: 5432
        Database: ${ database }
        MaxOpenConns: 20
        MaxIdleConns: 10
        MaxConnLifetime: 30m
        MaxConnIdleTime: 5m
        User:
          Username: ${ database_username }
          PasswordSecret: postgresql-auth
          PasswordSecretKey: password
          SSL:
            Mode: disable
        Admin:
          Username: ${ database_root_username }
          PasswordSecret: postgresql-auth
          PasswordSecretKey: root-password

ingress:
  enabled: true
  className: traefik
  annotations:
    kubernetes.io/ingress.class: traefik
    traefik.ingress.kubernetes.io/router.entrypoints: web
    %{ if displayOnHomepage }
    gethomepage.dev/enabled: "true"
    gethomepage.dev/name: "Zitadel"
    gethomepage.dev/description: "Identity and Access Management"
    gethomepage.dev/group: "Tools"
    gethomepage.dev/icon: "zitadel.png"
    %{ endif }
  hosts:
    - host: ${service_uri}
      paths:
        - path: /
          pathType: Prefix