ollama:
  enabled: false
tika:
  enabled: false
websocket:
  enabled: false
redis-cluster:
  enabled: false
ingress:
  enabled: true
  class: "apisix"
  annotations:
    cert-manager.io/cluster-issuer: "root-ca-issuer"
    cert-manager.io/duration: 8760h
    cert-manager.io/renew-before: 720h
    k8s.apisix.apache.org/plugin-config-name: https-redirect
  host: "{{ .Name }}.{{ .Domain }}"
  tls: true
  existingSecret: "{{ .Name }}-tls-secret"
persistence:
  enabled: true
  size: 2Gi
  existingClaim: ""
  subPath: ""
  accessModes:
    - ReadWriteOnce
  storageClass: ""
  selector: {}
  annotations: {}
extraEnvVars:
  - name: OPENAI_API_KEY
    value: "$extraEnvVars"
  - name: OAUTH_CLIENT_ID
    value: $KEYCLOAK_CLIENT_ID
  - name: OAUTH_CLIENT_SECRET
    value: $KEYCLOAK_CLIENT_SECRET
  - name: OPENID_PROVIDER_URL
    value: $KEYCLOAK_URL/realms/$KEYCLOAK_REALM/.well-known/openid-configuration
  - name: OAUTH_PROVIDER_NAME
    value: paasup
  - name: OAUTH_SCOPES
    value: "openid email profile"
  - name: ENABLE_LOGIN_FORM
    value: "true"
  - name: SSL_CERT_FILE
    value: "/etc/ssl/certs/keycloak/ca.crt"
  - name: ENABLE_OAUTH_SIGNUP
    value: "true"
  - name: OAUTH_MERGE_ACCOUNTS_BY_EMAIL
    value: "true"
  - name: DEFAULT_USER_ROLE
    value: user
  - name: ENV
    value: prod

volumeMounts:
  initContainer: []
  container:
    - name: "keycloak-tls"
      mountPath: "/etc/ssl/certs/keycloak"

volumes:
  - name: "keycloak-tls"
    secret:
      secretName: keycloak-tls