---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: miniflux
  namespace: argo-cd
spec:
  destination:
    name: ''
    namespace: apps-roboces
    server: https://kubernetes.default.svc
  sources:
    - repoURL: git.roboces.dev/catalin/fukuops
      chart: miniflux
      targetRevision: 1.0.3
      helm:
        valuesObject:
          miniflux:
            autoscaling:
              enabled: true
            securityContext:
              allowPrivilegeEscalation: false
              readOnlyRootFilesystem: true
              runAsUser: 10000
              runAsGroup: 10000
              capabilities:
                drop:
                  - all
            service:
              type: LoadBalancer
            ingress:
              enabled: true
              className: "traefik"
              hosts:
                - host: feeds.roboces.dev
                  paths:
                    - path: /
                      pathType: Prefix
            resources:
              requests:
                cpu: 500m
                memory: 512Mi
                ephemeral-storage: 2Gi
              limits:
                cpu: 700m
                memory: 1024Mi
                ephemeral-storage: 4Gi
            livenessProbe:
              tcpSocket:
                port: 8080
              initialDelaySeconds: 5
              timeoutSeconds: 15
              successThreshold: 1
              failureThreshold: 3
              periodSeconds: 10
            readinessProbe:
              httpGet:
                path: /
                port: 8080
              initialDelaySeconds: 15
              timeoutSeconds: 2
              successThreshold: 1
              failureThreshold: 3
              periodSeconds: 10
            podDisruptionBudget:
              enabled: true
              maxUnavailable: 1
            config:
              general:
                runMigrations: true
                createAdmin: true
                workerPoolSize: 1
                pollingFrequency: 120
                batchSize: 25
              oauth2:
                enabled: true
                provider: oidc
                redirectUrl: https://feeds.roboces.dev/oauth2/oidc/callback
                oidcDiscoveryEndpoint: https://auth.fukurokuju.dev/application/o/miniflux/
                userCreation: true
              metrics:
                enabled: true
                allowedNetworks: 10.42.1.0/16
              youtube:
                fetchWatchTime: true
            secret:
              existingSecretName: miniflux
  project: roboces
  syncPolicy:
    automated:
      prune: true
      selfHeal: true