apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: joplin
  namespace: pim
spec:
  interval: 10m
  dependsOn:
    - name: joplin-postgres
  chartRef:
    kind: OCIRepository
    name: joplin
  driftDetection:
    mode: enabled
  values:
    controllers:
      app:
        containers:
          app:
            image:
              repository: joplin/server
              # verified via Docker Hub API (hub.docker.com/v2/repositories/
              # joplin/server/tags): "3.7.1" and "latest" were pushed at the
              # same timestamp, i.e. this is what "latest" (the original
              # compose.yaml's tag) currently resolves to.
              tag: "3.7.1"
            env:
              APP_PORT: "22300"
              APP_BASE_URL: https://notes.aggtaa.com
              DB_CLIENT: pg
              POSTGRES_DATABASE: joplin
              POSTGRES_USER: joplin
              POSTGRES_HOST: joplin-postgres
              POSTGRES_PORT: "5432"
              POSTGRES_PASSWORD:
                valueFrom:
                  secretKeyRef:
                    name: joplin-secrets
                    key: POSTGRES_PASSWORD
            probes:
              startup:
                enabled: true
                spec:
                  periodSeconds: 5
                  failureThreshold: 60
              liveness:
                enabled: true
              readiness:
                enabled: true
            resources:
              requests:
                cpu: 50m
                memory: 128Mi
              limits:
                memory: 1Gi

    service:
      app:
        controller: app
        ports:
          http:
            port: 22300

    ingress:
      app:
        className: traefik
        annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
        hosts:
          - host: notes.aggtaa.com
            paths:
              - path: /
                pathType: Prefix
                service:
                  identifier: app
                  port: http
        tls:
          - secretName: joplin-tls
            hosts:
              - notes.aggtaa.com