# Auto-generated by forust | See https://github.com/traefik/traefik-helm-chart/blob/master/values.yaml
hostNetwork: false

securityContext:
  capabilities:
    add:
      - NET_BIND_SERVICE

podSecurityContext: ~

service:
  enabled: true
  type: LoadBalancer
  annotations:
    metallb.io/loadBalancerIPs: "192.168.80.2"
api:
  dashboard: true
  insecure: true

updateStrategy:
  type: Recreate

deployment:
  initContainers:
    - name: volume-permissions
      image: busybox:latest
      command:
        - sh
        - -c
        - "mkdir -p /data/letsencrypt && touch /data/letsencrypt/acme.json && chmod 600 /data/letsencrypt/acme.json"
      volumeMounts:
        - name: data
          mountPath: /data

providers:
  kubernetesIngress:
    enabled: false
  kubernetesCRD:
    enabled: true
  kubernetesGateway:
    enabled: false
  file:
    enabled: false

# Entrypoints
ports:
  web:
    port: 80
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
  websecure:
    port: 443
    http:
      tls:
        enabled: true
  ssh:
    port: 2221
    exposedPort: 2221
    protocol: TCP
    expose:
      default: true
  minecraft-tcp:
    port: 25565
    exposedPort: 25565
    protocol: TCP
    expose:
      default: true
  minecraft-udp:
    port: 19132
    exposedPort: 19132
    protocol: UDP
    expose:
      default: true
  dot:
    port: 853
    exposedPort: 853
    protocol: TCP
    expose:
      default: true

ingressRoute:
  dashboard:
    enabled: false

persistence:
  enabled: true
  size: 100Mi
  path: /data

certificatesResolvers:
  letsencrypt-staging:
    acme:
      email: bobrovod@national.shitposting.agency
      storage: /data/letsencrypt/acme.json
      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
      httpChallenge:
        entryPoint: web
  letsencrypt:
    acme:
      email: bobrovod@national.shitposting.agency
      storage: /data/letsencrypt/acme.json
      caServer: https://acme-v02.api.letsencrypt.org/directory
      httpChallenge:
        entryPoint: web

volumes:
  - name: traefik-dynamic
    mountPath: /etc/traefik/dynamic
    type: configMap

additionalArguments:
  - "--providers.file.directory=/etc/traefik/dynamic"
  - "--providers.file.watch=true"

logs:
  general:
    level: INFO
    format: json
  access:
    enabled: true