apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: vaultwarden
  namespace: vaultwarden
spec:
  interval: 30m
  chartRef:
    kind: OCIRepository
    name: app-template
  values:
    controllers:
      vaultwarden:
        containers:
          app:
            image:
              repository: vaultwarden/server
              tag: latest   # запинить конкретную версию перед продом
            env:
              DOMAIN: "https://vw.aggtaa.com"
              SIGNUPS_ALLOWED: "false"
              WEBSOCKET_ENABLED: "true"
              ADMIN_TOKEN:
                valueFrom:
                  secretKeyRef:
                    name: vaultwarden-secrets
                    key: ADMIN_TOKEN
            probes:
              liveness:
                enabled: true
              readiness:
                enabled: true

    service:
      app:
        controller: vaultwarden
        ports:
          http:
            port: 80

    ingress:
      app:
        className: traefik
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
        hosts:
          - host: vw.aggtaa.com
            paths:
              - path: /
                pathType: Prefix
                service:
                  identifier: app
                  port: http
        tls:
          - secretName: vaultwarden-tls
            hosts:
              - vw.aggtaa.com

    persistence:
      data:
        type: persistentVolumeClaim
        storageClass: longhorn-retain
        accessMode: ReadWriteOnce
        size: 2Gi
        retain: true
        globalMounts:
          - path: /data