global:
  security:
    allowInsecureImages: true

langfuse:
  logging:
    level: info
  salt:
    value: "$langfuse.salt.value"
  encryptionKey:
    value: "$langfuse.encryptionKey.value"

  ingress:
    enabled: true
    annotations:
      cert-manager.io/cluster-issuer: "root-ca-issuer"
      cert-manager.io/duration: 8760h
      cert-manager.io/renew-before: 720h
      k8s.apisix.apache.org/plugin-config-name: https-redirect
    hosts:
      - host: "{{ .Name }}.{{ .Domain }}"
        paths:
          - path: /
            pathType: Prefix
    tls:
      enabled: true
      secretName: "{{ .Name }}-tls-secret"
  web:
    image:
      repository: langfuse/langfuse
    resources: {}
    replicas: 1
  worker:
    image:
      repository: langfuse/langfuse-worker
    resources: {}
    replicas: 1

  nextauth:
    url: "https://{{ .Name }}.{{ .Domain }}"
    secret:
      value: "$langfuse.nextauth.secret.value"
  additionalEnv:
    - name: AUTH_DISABLE_USERNAME_PASSWORD
      value: "true"
    - name: AUTH_KEYCLOAK_CLIENT_ID
      value: "$KEYCLOAK_CLIENT_ID"
    - name: "AUTH_KEYCLOAK_CLIENT_SECRET"
      value: "$KEYCLOAK_CLIENT_SECRET"
    - name: "AUTH_KEYCLOAK_ISSUER"
      value: "$KEYCLOAK_URL/realms/$KEYCLOAK_REALM"
    - name: NODE_TLS_REJECT_UNAUTHORIZED
      value: "0"

postgresql:
  auth:
    username: "postgres"
    existingSecret: "$INFISICAL_SECRET"
    secretKeys:
      userPasswordKey: "postgres-password"

  migration:
    autoMigrate: true

  persistence:
    enabled: true
    storageClass: ""
    size: 5Gi

redis:
  auth:
    enabled: true
    existingSecret: "$INFISICAL_SECRET"
    existingSecretPasswordKey: "valkey-password"
  primary:
    persistence:
      enabled: true
      storageClass: ""
      size: 5Gi

clickhouse:
  deploy: true
  auth:
    username: default
    password: ""
    existingSecret: "$INFISICAL_SECRET"
    existingSecretKey: "admin-password"

  shards: 1
  persistence:
    enabled: true
    storageClass: ""
    size: 10Gi

s3:
  deploy: false
  bucket: "$s3.bucket"
  region: "auto"
  endpoint: "https://$s3.endpoint"
  accessKeyId:
    value: "$s3.accessKeyId.value"
  secretAccessKey:
    value: "$s3.secretAccessKey.value"