---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: vaultwarden
  namespace: argo-cd
spec:
  destination:
    name: ''
    namespace: apps-roboces
    server: https://kubernetes.default.svc
  sources:
    - repoURL: git.roboces.dev/catalin/fukuops
      chart: vaultwarden
      targetRevision: 0.1.1
      helm:
        valuesObject:
          conf:
            db:
              enable_db_wal: true
              connection_retries: 15
              timeout: 30
            web_vault:
              enabled: true
              folder: "web-vault/"

          replicaCount: 1
          securityContext:
            allowPrivilegeEscalation: false
            readOnlyRootFilesystem: false
            runAsUser: 10000
            runAsGroup: 10000
            capabilities:
              drop:
                - all
          service:
            type: LoadBalancer
          ingress:
            enabled: true
            className: "traefik"
            hosts:
              - host: vault.roboces.dev
                paths:
                  - path: /
                    pathType: Prefix
          resources:
            requests:
              cpu: 250m
              memory: 256Mi
            limits:
              cpu: 500m
              memory: 512Mi
          persistence:
            enabled: true
            storageClass: "truenas-nfs-csi"
            accessMode: ReadWriteMany
            size: 5Gi
          secret:
            existingSecretName: vaultwarden-secrets
  project: roboces
  syncPolicy:
    automated:
      prune: true
      selfHeal: true