apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: ntfy
  namespace: notify
spec:
  interval: 30m
  chartRef:
    kind: OCIRepository
    name: ntfy
  driftDetection:
    mode: enabled
  values:
    controllers:
      ntfy:
        containers:
          app:
            image:
              repository: binwiederhall/ntfy
              tag: v2.34.0
            args:
              - serve
            env:
              NTFY_BASE_URL: https://notify.aggtaa.com
              NTFY_LISTEN_HTTP: ":80"
              NTFY_BEHIND_PROXY: "true"
              NTFY_CACHE_FILE: /var/lib/ntfy/cache.db
              NTFY_AUTH_FILE: /var/lib/ntfy/user.db
              NTFY_AUTH_DEFAULT_ACCESS: deny-all
              NTFY_ATTACHMENT_CACHE_DIR: /var/lib/ntfy/attachments
              NTFY_ENABLE_LOGIN: "true"
            probes:
              liveness:
                enabled: true
                custom: true
                spec:
                  httpGet:
                    path: /v1/health
                    port: 80
              readiness:
                enabled: true
                custom: true
                spec:
                  httpGet:
                    path: /v1/health
                    port: 80
            resources:
              requests:
                cpu: 10m
                memory: 32Mi
              limits:
                memory: 256Mi

    service:
      app:
        controller: ntfy
        ports:
          http:
            port: 80

    ingress:
      app:
        className: traefik
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
        hosts:
          - host: notify.aggtaa.com
            paths:
              - path: /
                pathType: Prefix
                service:
                  identifier: app
                  port: http
        tls:
          - secretName: ntfy-tls
            hosts:
              - notify.aggtaa.com

    persistence:
      data:
        type: persistentVolumeClaim
        storageClass: longhorn
        accessMode: ReadWriteOnce
        size: 2Gi
        retain: true
        globalMounts:
          - path: /var/lib/ntfy