- name: Execute test
  hosts: alpha-control-plane
  become: true
  vars_files:
    - ../secrets.yaml
  roles:
    - role: ericomeehan.lemmy
      vars:
        serverName: "lemmy.eom.dev"

        smtp:
          server: "postfix.eom.dev:25"
          username: lemmy
          password: "{{ lemmy_admin_password }}"
          from: lemmy@eom.dev
          tls: true
        admin:
          username: lemmy_admin
          password: "{{ lemmy_admin_password }}"
          email: lemmy@eom.dev
        config:
          siteName: Lemmy on Kubernetes
          tls: true
          imageMode: StoreLinkPreviews
        extraConfig: {}
        nameOverride: ""
        fullnameOverride: ""
        taskrunner:
          enabled: false

          image:
            _keep: true
            # repository: docker.io/dessalines/lemmy
            # pullPolicy: IfNotPresent
            # tag:

          env:
            # RUST_BACKTRACE: 1

          envFrom:
            # - secretRef:
            #    name: my-extra-secrets

          podAnnotations: {}

          podSecurityContext: {}
            # fsGroup: 2000

          securityContext: {}
            # capabilities:
            #   drop:
            #   - ALL
            # readOnlyRootFilesystem: true
            # runAsNonRoot: true
            # runAsUser: 1000

          resources: {}
            # limits:
            #   cpu: 100m
            #   memory: 128Mi
            # requests:
            #   cpu: 100m
            #   memory: 128Mi

          nodeSelector: {}

          tolerations: []

          affinity: {}

        federationsender:
          enabled: false

          image:
            _keep: true
            # repository: docker.io/dessalines/lemmy
            # pullPolicy: IfNotPresent
            # tag:

          env:
            # RUST_BACKTRACE: 1

          envFrom:
            # - secretRef:
            #    name: my-extra-secrets

          podAnnotations: {}

          podSecurityContext: {}
            # fsGroup: 2000

          securityContext: {}
            # capabilities:
            #   drop:
            #   - ALL
            # readOnlyRootFilesystem: true
            # runAsNonRoot: true
            # runAsUser: 1000

          resources: {}
            # limits:
            #   cpu: 100m
            #   memory: 128Mi
            # requests:
            #   cpu: 100m
            #   memory: 128Mi

          nodeSelector: {}

          tolerations: []

          affinity: {}

        frontend:
          image:
            repository: docker.io/dessalines/lemmy-ui
            # pullPolicy: IfNotPresent
            # tag:

          replicaCount: 1

          strategy:
            type: RollingUpdate

          env:
            # LEMMY_UI_DEBUG: true

          envFrom:
            # - secretRef:
            #    name: my-extra-secrets

          livenessProbe:
            httpGet:
              path: /robots.txt
              port: http

          readinessProbe:
            httpGet:
              path: /robots.txt
              port: http

          # startupProbe:
          #   httpGet:
          #     path: /robots.txt
          #     port: http

          podAnnotations: {}

          podSecurityContext: {}
            # fsGroup: 2000

          securityContext: {}
            # capabilities:
            #   drop:
            #   - ALL
            # readOnlyRootFilesystem: true
            # runAsNonRoot: true
            # runAsUser: 1000

          service:
            type: ClusterIP
            port: 80
            sessionAffinity: ClientIP

          resources: {}
            # limits:
            #   cpu: 100m
            #   memory: 128Mi
            # requests:
            #   cpu: 100m
            #   memory: 128Mi

          nodeSelector: {}

          tolerations: []

          affinity: {}

        pictrs:
          ## NB: pict-rs uses a Sled database by default, which can only be opened by a single instance
          replicaCount: 1

          strategy:
            type: Recreate

          ## Generated on first install if left empty
          # apiKey:

          ## Can also be provided using an existing secret, note that the value is only
          ## updated on helm upgrades due to Lemmy's configuration system
          # existingSecret: ""
          existingSecretKey: apikey

          storage:
            ## Storage method for media, can be filesystem or object_storage
            method: filesystem

            objectStorage:
              ## For self-hosted S3, note that region _must_ also be provided, even for self-hosted S3
              # endpoint: https://minio.example.com
              usePathStyle: false

              bucketName: lemmy-pictrs
              # region:
              # accessKey:
              # secretKey:
              # sessionToken:

              # existingSecret: pictrs-secret
              # existingSecretAccessKey: access-key
              # existingSecretSecretKey: secret-key

          env:
            PICTRS__MEDIA__VIDEO_CODEC: vp9
            PICTRS__MEDIA__GIF__MAX_WIDTH: 256
            PICTRS__MEDIA__GIF__MAX_HEIGHT: 256
            PICTRS__MEDIA__GIF__MAX_AREA: 65536
            PICTRS__MEDIA__GIF__MAX_FRAME_COUNT: 400

          envFrom:
            # - secretRef:
            #    name: my-extra-secrets

          image:
            repository: docker.io/asonix/pictrs
            pullPolicy: IfNotPresent
            tag: 0.4.0-beta.19

          ## Used by both the sled database and also media itself if using the filesystem storage method
          persistence:
            enabled: true
            accessMode: ReadWriteOnce
            size: 16Gi
            # existingClaim:
            # storageClass:

          livenessProbe:
            httpGet:
              path: /healthz
              port: http

          readinessProbe:
            httpGet:
              path: /healthz
              port: http

          startupProbe:
            httpGet:
              path: /healthz
              port: http

          podAnnotations: {}

          podSecurityContext: {}
            # fsGroup: 2000

          securityContext: {}
            # capabilities:
            #   drop:
            #   - ALL
            # readOnlyRootFilesystem: true
            # runAsNonRoot: true
            # runAsUser: 1000

          service:
            type: ClusterIP
            port: 80

          resources: {}
            # limits:
            #   cpu: 100m
            #   memory: 128Mi
            # requests:
            #   cpu: 100m
            #   memory: 128Mi

          nodeSelector: {}

          tolerations: []

          affinity: {}

        proxy:
          enabled: true
          replicaCount: 1

          strategy:
            type: RollingUpdate

          image:
            repository: nginx
            pullPolicy: Always
            tag: 1-alpine

          livenessProbe:
            httpGet:
              path: /
              port: http

          readinessProbe:
            httpGet:
              path: /
              port: http

          podAnnotations: {}

          podSecurityContext: {}
            # fsGroup: 2000

          securityContext: {}
            # capabilities:
            #   drop:
            #   - ALL
            # readOnlyRootFilesystem: true
            # runAsNonRoot: true
            # runAsUser: 1000

          service:
            type: ClusterIP
            port: 80

          resources: {}
            # limits:
            #   cpu: 100m
            #   memory: 128Mi
            # requests:
            #   cpu: 100m
            #   memory: 128Mi

          nodeSelector: {}

          tolerations: []

          affinity: {}

        postgresql:
          enabled: true
          # host:

          poolSize: 10

          auth:
            username: lemmy
            database: lemmy
            # password:

          service:
            port: 5432

          ## This may need to be set to 'require' if your PostgreSQL database forbids unencrypted connections
          # sslmode: prefer

        ingress:
          enabled: true
          className: "nginx"
          annotations:
            kubernetes.io/ingress.class: nginx
            kubernetes.io/tls-acme: "true"
          hosts:
            - lemmy.eom.dev
          tls:
            - secretName: lemmy-tls
              hosts:
                - lemmy.eom.dev