From 5329bf37984da848b346ef834d6517e619c92f10 Mon Sep 17 00:00:00 2001
From: Eric Meehan <eric@eom.dev>
Date: Wed, 17 Jun 2026 17:29:58 -0400
Subject: [PATCH] Successful deploy

---
 tasks/main.yml | 29 ++++++++++++++++++++++-------
 1 file changed, 22 insertions(+), 7 deletions(-)

diff --git a/tasks/main.yml b/tasks/main.yml
index a9ea39f..8e3b2ad 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -14,13 +14,18 @@
 - name: Deploy Pixelfed
   kubernetes.core.helm:
     name: pixelfed
-    chart_ref: small-hack-pixelfed/pixelfed
+    chart_ref: https://gitea.eom.dev/DevOps/helm-pixelfed/releases/download/v1.0.0/helm-pixelfed-v1.0.0.tar.gz
     release_namespace: pixelfed
     create_namespace: true
     values:
+      image:
+        repository: mattlqx/docker-pixelfed
+        tag: v0.12.7-nginx
       ingress:
         enabled: true
-        annotations: {}
+        annotations: 
+          cert-manager.io/cluster-issuer: ca-issuer
+        className: "nginx"
         hosts:
           - host: pixelfed.eom.dev
             paths:
@@ -37,18 +42,28 @@
         targetCPUUtilizationPercentage: 80
       valkey:
         enabled: true
+        image:
+          repository: bitnamilegacy/valkey
         fullnameOverride: "valkey"
         global:
           storageClass: "r720-nfs-client"
+          security:
+            allowInsecureImages: true
+          valkey:
+            password: "{{ pixelfed_valkey_password }}"
         auth:
           enabled: true
           existingSecret: ""
           existingSecretPasswordKey: "password"
       postgresql:
         enabled: true
+        image:
+          repository: bitnamilegacy/postgresql
         fullnameOverride: "postgresql"
         global:
-          storageClass: ""
+          storageClass: "nfs-client"
+          security:
+            allowInsecureImages: true
         volumePermissions:
           enabled: false
       phpConfigs: {}
@@ -64,7 +79,7 @@
         #   pm.max_spare_servers = 280
       persistence:
         enabled: true
-        storageClassName: ""
+        storageClassName: "nfs-client"
         storage: 2Ti
         accessModes:
           - ReadWriteOnce
@@ -95,7 +110,7 @@
           log_level: "debug"
         open_registration: true
         enforce_email_verification: true
-        min_password_length: 16
+        min_password_length: 14
         account_deletion: true
         oauth_enabled: true
         stories_enabled: true
@@ -118,8 +133,8 @@
           description: "Pixelfed on eom.dev"
           discover_public: true
           public_hashtags: true
-          contact_form: true
-          contact_email: "eric@eom.dev"
+          contact_form: false
+          contact_email: ""
           contact_max_per_day: 1
           profile_embeds: true
           post_embeds: true