apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: agendav
  namespace: pim
spec:
  interval: 10m
  chartRef:
    kind: OCIRepository
    name: radicale
  driftDetection:
    mode: enabled
  values:
    controllers:
      agendav:
        containers:
          app:
            image:
              repository: ghcr.io/nagimov/agendav-docker
              tag: latest
            env:
              AGENDAV_SERVER_NAME: "127.0.0.1"
              AGENDAV_TITLE: ""
              AGENDAV_FOOTER: ""
              AGENDAV_CALDAV_SERVER: "http://radicale.pim.svc.cluster.local:5232/%u"
              AGENDAV_CALDAV_PUBLIC_URL: "https://c.aggtaa.com/server"
              AGENDAV_TIMEZONE: "Europe/Moscow"
              AGENDAV_WEEKSTART: "1"
              AGENDAV_LANG: "en"
              AGENDAV_LOG_DIR: "/tmp/"
            probes:
              liveness:
                enabled: true
              readiness:
                enabled: true

    service:
      app:
        controller: agendav
        ports:
          http:
            port: 8080

    ingress:
      app:
        className: traefik
        # no cert-manager annotation here: radicale's own Ingress already
        # requests/owns the Certificate for c.aggtaa.com -> radicale-tls.
        # A second Ingress with the annotation would create a competing
        # Certificate for the same host/secret.
        hosts:
          - host: c.aggtaa.com
            paths:
              - path: /
                pathType: Prefix
                service:
                  identifier: app
                  port: http
        tls:
          - secretName: radicale-tls
            hosts:
              - c.aggtaa.com