fa86fa4c9c
Change CouchDB ingress hostname from communicore.mk-labs.cloud to communicore.local.mk-labs.cloud to align with External-DNS configuration. CouchDB is an internal service and should use the .local.mk-labs.cloud zone managed by Technitium DNS, not the public .mk-labs.cloud zone managed by Cloudflare. This ensures External-DNS will properly create the A record in the internal DNS server.
91 lines
1.9 KiB
YAML
91 lines
1.9 KiB
YAML
# CouchDB Helm Chart Values
|
|
# Application: couchdb
|
|
# Theme: communicore (DNS only)
|
|
# Purpose: Obsidian sync backend for mk-labs
|
|
|
|
# Cluster configuration
|
|
clusterSize: 1 # Single node for homelab
|
|
|
|
# Admin credentials managed via ExternalSecret
|
|
# See externalsecret.yaml for 1Password integration
|
|
createAdminSecret: false
|
|
extraSecretName: "couchdb-admin"
|
|
adminUsernameKey: "adminUsername"
|
|
adminPasswordKey: "adminPassword"
|
|
cookieAuthSecretKey: "cookieAuthSecret"
|
|
|
|
# Auto-setup cluster after installation
|
|
autoSetup:
|
|
enabled: true
|
|
image:
|
|
repository: curlimages/curl
|
|
tag: "8.11.1" # Pinned version
|
|
pullPolicy: IfNotPresent
|
|
defaultDatabases:
|
|
- _global_changes
|
|
|
|
# Network policy for pod communication
|
|
networkPolicy:
|
|
enabled: true
|
|
|
|
# Service account
|
|
serviceAccount:
|
|
enabled: true
|
|
create: true
|
|
|
|
# Persistent storage
|
|
persistentVolume:
|
|
enabled: true
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 20Gi
|
|
storageClass: "nfs-emporium"
|
|
|
|
# CouchDB image - pinned version
|
|
image:
|
|
repository: couchdb
|
|
tag: "3.5.1"
|
|
pullPolicy: IfNotPresent
|
|
|
|
# Service configuration
|
|
service:
|
|
enabled: true
|
|
type: ClusterIP
|
|
port: 5984
|
|
|
|
# Ingress configuration
|
|
ingress:
|
|
enabled: true
|
|
className: nginx
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: "letsencrypt-staging" # Start with staging
|
|
external-dns.alpha.kubernetes.io/hostname: "communicore.local.mk-labs.cloud"
|
|
external-dns.alpha.kubernetes.io/target: "10.1.71.80"
|
|
hosts:
|
|
- communicore.local.mk-labs.cloud
|
|
tls:
|
|
- secretName: couchdb-tls
|
|
hosts:
|
|
- communicore.local.mk-labs.cloud
|
|
|
|
# Resource limits
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 512Mi
|
|
limits:
|
|
cpu: 1000m
|
|
memory: 2Gi
|
|
|
|
# CouchDB configuration
|
|
couchdbConfig:
|
|
couchdb:
|
|
uuid: "decafbaddecafbaddecafbaddecafbad" # Will be regenerated on first run
|
|
chttpd:
|
|
bind_address: "0.0.0.0"
|
|
port: 5984
|
|
require_valid_user: true
|
|
httpd:
|
|
bind_address: "0.0.0.0"
|
|
port: 5986
|