apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: radicale
  namespace: pim
spec:
  interval: 10m
  chartRef:
    kind: OCIRepository
    name: radicale
  driftDetection:
    mode: enabled
  values:
    controllers:
      radicale:
        containers:
          app:
            image:
              repository: tomsquest/docker-radicale
              tag: "3.7.6.0"
            probes:
              liveness:
                enabled: true
              readiness:
                enabled: true

    service:
      app:
        controller: radicale
        ports:
          http:
            port: 5232

    ingress:
      app:
        className: traefik
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
          traefik.ingress.kubernetes.io/router.middlewares: pim-radicale-stripprefix@kubernetescrd,pim-radicale-headers@kubernetescrd
        hosts:
          - host: c.aggtaa.com
            paths:
              - path: /server2
                pathType: Prefix
                service:
                  identifier: app
                  port: http
        tls:
          - secretName: radicale-tls
            hosts:
              - c.aggtaa.com

    persistence:
      config:
        type: configMap
        name: radicale-config
        globalMounts:
          - path: /config/config
            subPath: config
            readOnly: true
          - path: /config/rights
            subPath: rights
            readOnly: true
      users:
        type: secret
        name: radicale-secrets
        globalMounts:
          - path: /config/users
            subPath: users
            readOnly: true
      data:
        type: persistentVolumeClaim
        accessMode: ReadWriteMany
        size: 1Gi
        storageClass: longhorn
        retain: true
        globalMounts:
          - path: /data