Files
kube-single-age/clusters/base/apps/vaultwarden/helmrelease.yaml
T
2026-07-25 16:03:41 +03:00

67 lines
1.5 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: vaultwarden
namespace: vaultwarden
spec:
interval: 30m
chartRef:
kind: OCIRepository
name: vaultwarden
values:
controllers:
vaultwarden:
containers:
app:
image:
repository: vaultwarden/server
tag: 1.37.0
env:
DOMAIN: "https://vw.aggtaa.com"
SIGNUPS_ALLOWED: "false"
WEBSOCKET_ENABLED: "true"
ADMIN_TOKEN:
valueFrom:
secretKeyRef:
name: vaultwarden-secrets
key: ADMIN_TOKEN
probes:
liveness:
enabled: true
readiness:
enabled: true
service:
app:
controller: vaultwarden
ports:
http:
port: 80
ingress:
app:
className: traefik
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
hosts:
- host: vw.aggtaa.com
paths:
- path: /
pathType: Prefix
service:
identifier: app
port: http
tls:
- secretName: vaultwarden-tls
hosts:
- vw.aggtaa.com
persistence:
data:
type: persistentVolumeClaim
storageClass: longhorn
accessMode: ReadWriteOnce
size: 2Gi
retain: true
globalMounts:
- path: /data