---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: miniflux
  namespace: argocd
spec:
  destination:
    name: ''
    namespace: apps-roboces
    server: https://kubernetes.default.svc
  sources:
    - path: k8s/charts/miniflux
      repoURL: https://git.roboces.dev/catalin/fukuops.git
      targetRevision: feat/miniflux-helm
      helm:
        valuesObject:
          replicaCount: 3
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: true
            runAsUser: 10000
            runAsGroup: 10000
            capabilities:
              drop:
                - all
          service:
            type: LoadBalancer
          ingress:
            enabled: true
            className: "traefik"
            hosts:
              - host: feeds.roboces.dev
                paths:
                  - path: /
                    pathType: Prefix
          resources:
            requests:
              cpu: 300m
              memory: 300Mi
              ephemeral-storage: 2Gi
            limits:
              cpu: 400m
              memory: 500Mi
              ephemeral-storage: 4Gi
          livenessProbe:
            tcpSocket:
              port: 8080
            initialDelaySeconds: 5
            timeoutSeconds: 15
            successThreshold: 1
            failureThreshold: 3
            periodSeconds: 10
          readinessProbe:
            httpGet:
              path: /
              port: 8080
            initialDelaySeconds: 15
            timeoutSeconds: 2
            successThreshold: 1
            failureThreshold: 3
            periodSeconds: 10
          podDisruptionBudget:
            enabled: true
            maxUnavailable: 1
          env:
            RUN_MIGRATIONS: "1"
            CREATE_ADMIN: "1"
            OAUTH2_PROVIDER: oidc
            OAUTH2_REDIRECT_URL: https://feeds.roboces.dev/oauth2/oidc/callback
            OAUTH2_OIDC_DISCOVERY_ENDPOINT: https://auth.fukurokuju.dev/application/o/miniflux/
            OAUTH2_USER_CREATION: "1"
            FETCH_YOUTUBE_WATCH_TIME: "1"
            WORKER_POOL_SIZE: "1"
            POLLING_FREQUENCY: "120"
            BATCH_SIZE: "25"
            METRICS_COLLECTOR: "1"
            METRICS_ALLOWED_NETWORKS: 10.42.1.0/16
          secret:
            existingSecretName: miniflux
  project: roboces
  syncPolicy:
    automated:
      prune: true
      selfHeal: true