#SPDX-License-Identifier: MIT-0
---
# tasks file for ansible-role-mailman3
- name: deploy
  kubernetes.core.helm:
    name: mailman3
    chart_ref: https://github.com/fw8/mailman3-helm-chart.git
    release_namespace: mailman3
    create_namespace: true
    values:
      # Default values for mailman3.
      # This is a YAML-formatted file.
      # Declare variables to be passed into your templates.

      # These are the settings that you MUST change before deploying:
      # Initial Settings for the admin account:
      admin:
        username: admin
        email: mailman@eom.dev
        password: "{{ mailman_admin_password }}"
      # some keys have to be provided...
      hyperkittyApiKey: "{{ mailman_hyperkitty_api_key }}"
      djangoSecretKey: "{{ mailman_django_secret_key }}"
      hostname: mailman.eom.dev
      imagePullSecrets: []
      nameOverride: ""
      fullnameOverride: ""
      core:
        image:
          repository: maxking/mailman-core
        podAnnotations: {}
        podSecurityContext: {}
        # fsGroup: 2000
        securityContext: {}
        # capabilities:
        #   drop:
        #   - ALL
        # readOnlyRootFilesystem: true
        # runAsNonRoot: true
        # runAsUser: 1000
        nodeSelector: {}
        tolerations: []
        affinity: {}
        resources:
        # We usually recommend not to specify default resources and to leave this as a conscious
        # choice for the user. This also increases chances charts run on environments with little
        # resources, such as Minikube. If you do want to specify resources, uncomment the following
        # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
          limits:
            cpu: 100m
            memory: 512Mi
          requests:
            cpu: 100m
            memory: 128Mi
        persistence:
          # persistence.existingClaim: ...
          size: 100Gi
          accessMode: ReadWriteOnce
      web:
        image:
          repository: maxking/mailman-web
        podAnnotations: {}
        podSecurityContext: {}
        securityContext: {}
        nodeSelector: {}
        tolerations: []
        affinity: {}
        resources: {}
        persistence:
          # persistence.existingClaim: ...
          size: 100Gi
          accessMode: ReadWriteOnce
      service:
        type: ClusterIP
      ingress:
        enabled: false
        tls: false
        annotations:
          # use NGINX Ingress Controller
          kubernetes.io/ingress.class: "nginx"
          # use Cert-Manager for LetsEncrypt Certificates
          cert-manager.io/issuer: "ca-cert"