langfuse:
  logging:
    level: info
  salt:
    value: "Hshs64NHaE0Sw4kfLa/uEcGjyqVQS7U+NdeoF6/6xyM=" # openssl rand -base64 32
  encryptionKey:
    value: "7bcbf030457b00cca6300809233adda0abbee55bc71802519a9720ab2f2c6629"   # openssl rand -hex 32

  ingress:
    enabled: true
    className: "kong"
    annotations: 
      cert-manager.io/cluster-issuer: "selfsigned-issuer"
    hosts: 
    - host: "langfuse.example.org"
      paths:
        - path: /
          pathType: ImplementationSpecific
    tls:
      enabled: true
      secretName: "langfuse-tls"
  web:
    image:
      repository: langfuse/langfuse
    resources: {}
    replicas: 1
  worker:
    image:
      repository: langfuse/langfuse-worker
    resources: {}
    replicas: 1

  # NextAuth configuration
  nextauth:
    url: http://langfuse.example.org
    # openssl rand -base64 32
    secret:
      value: "L/mKkKmVBAs5Dwc54PiTpmjGrA/KRhdDJ2jLFcCDm4Y="
      # secretKeyRef:
      #   name: ""
      #   key: ""
  additionalEnv:
    # email/password 로그인 비활성화
    - name: AUTH_DISABLE_USERNAME_PASSWORD
      value: "true"
    # keycloak 연동
    - name: AUTH_KEYCLOAK_CLIENT_ID
      value: "langfuse"
    - name: "AUTH_KEYCLOAK_CLIENT_SECRET"
      value: "J5xyEzbDcc7VQ89S7yBXRbaM8TYryILI"
    - name: "AUTH_KEYCLOAK_ISSUER"
      value: "https://keycloak.example.org/auth/realms/paasup"
    # keycloak 인증서 등록
#     - name: "NODE_EXTRA_CA_CERTS"
#       value: /etc/ssl/certs/ca.crt

# extraVolumes:
#   - name: keycloak-tls
#     secret:
#       secretName: keycloak-tls

# extraVolumeMounts:
#   - name: keycloak-tls
#     mountPath: /etc/ssl/certs/ca.crt
#     subPath: ca.crt


# PostgreSQL Configuration
postgresql:
  auth:
    username: "postgres"
    password: "postgres"
    
  persistence:
    enabled: true
    storageClass: ""
    size: 5Gi

redis:
  auth:
    password: "password"
  primary:
    persistence:
      enabled: true
      storageClass: ""
      size: 5Gi

# ClickHouse Configuration
clickhouse:  
  auth:
    username: default
    password: "password"
    
  shards: 1
  persistence:
    enabled: true
    storageClass: ""
    size: 10Gi

# S3/MinIO Configuration
s3:
  deploy: false
  bucket: "langfuse"
  region: "auto"
  endpoint: "http://minio-api.example.org"
  accessKeyId:
    value: "CHaRLr736nSqaNEu4oGz"
  secretAccessKey:
    value: "HoZQwXDjZW6ytvTo5DHEfHmuiXykv7xoB9sr8VZo"