djangoSecretKey: &djangoSecretKey "lkjsdlfkjsldkfjslkdfjslkdjfslkdjf"
djangoSuperUserEmail: admin@example.com
djangoSuperUserPass: admin
oidc:
    clientId: drive
    clientSecret: ThisIsAnExampleKeyForDevPurposeOnly

image:
  repository: lasuite/drive-backend
  pullPolicy: Always
  tag: "latest"

backend:
  replicas: 1
  envVars:
    DJANGO_CSRF_TRUSTED_ORIGINS: https://drive.127.0.0.1.nip.io
    DJANGO_CONFIGURATION: Feature
    DJANGO_ALLOWED_HOSTS: drive.127.0.0.1.nip.io
    DJANGO_SERVER_TO_SERVER_API_TOKENS: secret-api-key
    DJANGO_SECRET_KEY: *djangoSecretKey
    DJANGO_SETTINGS_MODULE: drive.settings
    DJANGO_SUPERUSER_PASSWORD: admin
    DJANGO_EMAIL_BRAND_NAME: "La Suite Numérique"
    DJANGO_EMAIL_HOST: "mailcatcher"
    DJANGO_EMAIL_LOGO_IMG: https://drive.127.0.0.1.nip.io/assets/logo-suite-numerique.png
    DJANGO_EMAIL_PORT: 1025
    DJANGO_EMAIL_USE_SSL: False
    LOGGING_LEVEL_LOGGERS_ROOT: INFO
    LOGGING_LEVEL_LOGGERS_APP: INFO
    OIDC_OP_JWKS_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/certs
    OIDC_OP_AUTHORIZATION_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/auth
    OIDC_OP_TOKEN_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/token
    OIDC_OP_USER_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/userinfo
    OIDC_OP_LOGOUT_ENDPOINT: https://drive-keycloak.127.0.0.1.nip.io/realms/drive/protocol/openid-connect/logout
    OIDC_RP_CLIENT_ID: drive
    OIDC_RP_CLIENT_SECRET: ThisIsAnExampleKeyForDevPurposeOnly
    OIDC_RP_SIGN_ALGO: RS256
    OIDC_RP_SCOPES: "openid email"
    OIDC_USER_FIELD_TO_SHORTNAME: "given_name"
    OIDC_USER_FIELDS_TO_FULLNAME: "given_name,usual_name"
    LOGIN_REDIRECT_URL: https://drive.127.0.0.1.nip.io
    LOGIN_REDIRECT_URL_FAILURE: https://drive.127.0.0.1.nip.io
    LOGOUT_REDIRECT_URL: https://drive.127.0.0.1.nip.io
    DB_HOST: postgresql-dev-backend-postgres
    DB_NAME:
      secretKeyRef:
        name: postgresql-dev-backend-postgres
        key: database
    DB_USER:
      secretKeyRef:
        name: postgresql-dev-backend-postgres
        key: username
    DB_PASSWORD:
      secretKeyRef:
        name: postgresql-dev-backend-postgres
        key: password
    DB_PORT: 5432
    REDIS_URL: redis://user:pass@redis-dev-backend-redis:6379/1
    DJANGO_CELERY_BROKER_URL: redis://user:pass@redis-dev-backend-redis:6379/1
    AWS_S3_ENDPOINT_URL: https://drive-minio.127.0.0.1.nip.io
    AWS_S3_ACCESS_KEY_ID: dinum
    AWS_S3_SECRET_ACCESS_KEY: password
    AWS_STORAGE_BUCKET_NAME: drive-media-storage
    AWS_S3_SIGNATURE_VERSION: s3v4
    STORAGES_STATICFILES_BACKEND: django.contrib.staticfiles.storage.StaticFilesStorage
    MEDIA_BASE_URL: https://drive.127.0.0.1.nip.io
  migrate:
    command:
      - "/bin/sh"
      - "-c"
      - |
        python manage.py migrate --no-input
    restartPolicy: Never

  createsuperuser:
    command:
      - "/bin/sh"
      - "-c"
      - |
        python manage.py createsuperuser --email admin@example.com --password admin
    restartPolicy: Never

  # Extra volume mounts to manage our local custom CA and avoid to set ssl_verify: false
  extraVolumeMounts:
    - name: certs
      mountPath: /usr/local/lib/python3.12/site-packages/certifi/cacert.pem
      subPath: cacert.pem

  # Extra volumes to manage our local custom CA and avoid to set ssl_verify: false
  extraVolumes:
    - name: certs
      configMap:
        name: certifi
        items:
        - key: cacert.pem
          path: cacert.pem

frontend:
  replicas: 1
  image:
    repository: lasuite/drive-frontend
    pullPolicy: Always
    tag: "latest"


ingress:
  enabled: true
  host: drive.127.0.0.1.nip.io
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: 150m

ingressAdmin:
  enabled: true
  host: drive.127.0.0.1.nip.io

posthog:
  ingress:
    enabled: false

  ingressAssets:
    enabled: false

ingressMedia:
  enabled: true
  host: drive.127.0.0.1.nip.io

  annotations:
    nginx.ingress.kubernetes.io/auth-url: https://drive.127.0.0.1.nip.io/api/v1.0/items/media-auth/
    nginx.ingress.kubernetes.io/auth-response-headers: "Authorization, X-Amz-Date, X-Amz-Content-SHA256"
    nginx.ingress.kubernetes.io/upstream-vhost: drive-minio.127.0.0.1.nip.io
    nginx.ingress.kubernetes.io/rewrite-target: /drive-media-storage/$1

ingressMediaPreview:
  enabled: true
  host: drive.127.0.0.1.nip.io

  annotations:
    nginx.ingress.kubernetes.io/auth-url: https://drive.127.0.0.1.nip.io/api/v1.0/items/media-auth/
    nginx.ingress.kubernetes.io/auth-response-headers: "Authorization, X-Amz-Date, X-Amz-Content-SHA256"
    nginx.ingress.kubernetes.io/upstream-vhost: drive-minio.127.0.0.1.nip.io
    nginx.ingress.kubernetes.io/rewrite-target: /drive-media-storage/$1

serviceMedia:
  host: minio-dev-backend-minio.drive.svc.cluster.local
  port: 80