---
# tasks file for social
- name: Deploy Mastodon
  kubernetes.core.helm:
    name: mastodon
    chart_ref: oci://registry-1.docker.io/bitnamicharts/mastodon
    release_namespace: mastodon
    create_namespace: true
    values:
      localDomain: mastodon.eom.dev
      global:
        defaultStorageClass: default
      web:
        extraEnvVars:
          - name: LDAP_ENABLED
            value: "yes"
          - name: LDAP_HOST
            value: openldap.auth.svc.cluster.local
          - name: LDAP_PORT
            value: 389
          - name: LDAP_METHOD
            value: plain
          - name: LDAP_BASE
            value: dc=eom,dc=dev
          - name: LDAP_BIND_DN
            value: cn=readonly,dc=eom,dc=dev
          - name: LDAP_PASSWORD
            value: "{{ ldap_readonly_password }}"
          - name: LDAP_UID
            value: uid
          - name: LDAP_MAIL
            value: mail
          - name: LDAP_SEARCH_FILTER
            value: (|(objectClass=inetOrgPerson))
      apache:
        ingress:
          enabled: true
          hostname: mastodon.eom.dev
          annotations:
            cert-manager.io/cluster-issuer: ca-issuer
          tls:
            - hosts:
              - mastodon.eom.dev
              secretName: mastodon-tls
      postgresql:
        auth:
          password: "{{ mastodon_postgres_password }}"