From 917060abe731f4769a9e84cba6c9250f57667580 Mon Sep 17 00:00:00 2001
From: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Date: Sun, 9 Oct 2022 02:40:23 +0300
Subject: [PATCH] feat(docspell): add docspell (#3999)

* feat(docspell): add docspell

* add soe mroe stuff

* finish intregation

* add joex into the mix

* add few more

* use arrays instead of comma separated

* empty line

* update list function

* add some more

* finish files

* finish files

* run as root for tests

* use correct config for joex and add logging

* add db config to joex

* add schedullers

* add user tasks

* whoops

* lower common

* cleanup quest

* whoops

* fix port

* fix port

* quote ports

* fix bools

* commenout out few vars for now

* fix secret

* add some todo's

* disable solr for now

* dont quote lists

* try comma sepa

* hmhm

* back to envs

* re arrange a bit

* comment out for now

* .

* add some more

* add some more

* try smthing

* whops

* again

* typo

* .

* hmm

* fix identation

* hmm

* almost finish server config

* fix config name

* fix path

* hmm

* nomsg

* splt

* mount

* updates

* add some more

* lint

* use subpath

* whop

* add more

* comm

* fix some configs

* re-enabe solr

* some lists

* test allowed urls with wildcard in list

* more lists

* add more lists

* fulltextsearch

* add few more

* add openid

* enable probes on joex

* unused var

* fix joex probe

* remove defaults, it's already defined in values. no need for duplicaets

* add few mroe comments

* fix joex

* add dsc container

* change dir

* add dsc quiestions

* no probes for nwo

* add questions

* fix config

* add more questions

* bit of cleanup in the gui

* fix config

* enable probe and adjust config

* disable probes fo rnow
---
 charts/incubator/docspell/.helmignore         |  30 +
 charts/incubator/docspell/Chart.yaml          |  36 +
 charts/incubator/docspell/README.md           |   0
 charts/incubator/docspell/icon.png            | Bin 0 -> 20566 bytes
 charts/incubator/docspell/questions.yaml      | 724 ++++++++++++++++++
 charts/incubator/docspell/templates/_dsc.tpl  |  41 +
 charts/incubator/docspell/templates/_joex.tpl |  46 ++
 .../incubator/docspell/templates/_secret.tpl  | 616 +++++++++++++++
 .../incubator/docspell/templates/common.yaml  |  13 +
 charts/incubator/docspell/values.yaml         | 539 +++++++++++++
 cspell.config.yaml                            |   3 +
 11 files changed, 2048 insertions(+)
 create mode 100644 charts/incubator/docspell/.helmignore
 create mode 100644 charts/incubator/docspell/Chart.yaml
 create mode 100644 charts/incubator/docspell/README.md
 create mode 100644 charts/incubator/docspell/icon.png
 create mode 100644 charts/incubator/docspell/questions.yaml
 create mode 100644 charts/incubator/docspell/templates/_dsc.tpl
 create mode 100644 charts/incubator/docspell/templates/_joex.tpl
 create mode 100644 charts/incubator/docspell/templates/_secret.tpl
 create mode 100644 charts/incubator/docspell/templates/common.yaml
 create mode 100644 charts/incubator/docspell/values.yaml

diff --git a/charts/incubator/docspell/.helmignore b/charts/incubator/docspell/.helmignore
new file mode 100644
index 00000000000..77ca5567b26
--- /dev/null
+++ b/charts/incubator/docspell/.helmignore
@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
+# docs folder
+/docs
+# icon
+icon.png
diff --git a/charts/incubator/docspell/Chart.yaml b/charts/incubator/docspell/Chart.yaml
new file mode 100644
index 00000000000..3b4d641679c
--- /dev/null
+++ b/charts/incubator/docspell/Chart.yaml
@@ -0,0 +1,36 @@
+apiVersion: v2
+appVersion: "10.6.2"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 10.6.11
+  - condition: postgresql.enabled
+    name: postgresql
+    repository: https://charts.truecharts.org/
+    version: 8.0.88
+  - condition: solr.enabled
+    name: solr
+    repository: https://charts.truecharts.org/
+    version: 0.0.59
+description: Docspell is a personal document organizer.
+home: https://truecharts.org/docs/charts/stable/airsonic
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/airsonic.png
+keywords:
+  - docs
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: docspell
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/stable/airsonic
+  - https://github.com/eikek/docspell
+  - https://docspell.org/docs/install/docker/
+  - https://docspell.org/docs/configure/defaults/
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - productivity
+  truecharts.org/SCALE-support: "true"
+  truecharts.org/grade: U
diff --git a/charts/incubator/docspell/README.md b/charts/incubator/docspell/README.md
new file mode 100644
index 00000000000..e69de29bb2d
diff --git a/charts/incubator/docspell/icon.png b/charts/incubator/docspell/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..7a13c132d81552489510517d2cf1bc6eb02bf57a
GIT binary patch
literal 20566
zcmXt91yEc~w_My^gL{IzI|L69+}(oP0>Rzg-Q6|89fE5D1a}MW4*%t=_llyZT4v|Y
z%$+%>Pj^rFR|P2)L;^$*2!tXd{aG0Vf>?e3g@*+`(G)DS1OC7o%Sn9(y}keBb(SWA
zKwpt$K8vb;UpmQ#^THV<7-TkNRxD1;B!v9D#3%!w_lbA_Hb54ecH|T`04$3AS@yGN
z1exApr-Up#HCPOZ5e&~rjxG&P4g)P_u{KVFFY95qm@T+}_cZ3Iyfb;4<80x&_XOsH
z53r#roOyx?EZr&MmOX_{{4=n~@MA`&=qzhui+Pg9F=~xr(&1;A9E!Ok)Jv<w;~AP#
z!7TdZtZ!<T|9zZT!^Wmb_o>%ouA{)q)Jo><eq?1f<1Eo*w-h16*3|XX*@jJm5VvL!
zACqLg6|G!*0-v6UkuE2E0GYJ=<t>x){A^d&+SYOyY`V0#Etwe`N~7BK5M|PUjhJ$4
z+5r9a5Z3irkNM*^I8ci~<V{cKW8vA;F%mSB0JJE&DLoFI%3y6(uikUqq^##Z`7J5}
z5o=5Q?EDoqvohQ)9j8y3gPb0T95aTPp1(g_rz+r<V?I#?=)eY$!H+7{Nak}OY4E9>
zh^MD^ad?Us_GTC;FSgX1IX}oD>cM<Ep-t&og%L$BGUEN<t$U4IPmQv$ZYdo!UDp!S
z(?rbSw@rI=nD!=m;o^A5x%I*dj3|^&U&do~gn`pMGqmiYR-}gx#{Kugzb1J-W5JKi
zZyFBGV(8H2U+nB`Ux&m}G9Fn1C6+`{UQi(wa8?wT9T^o$_&dCH1)()oCeWcp5wSS;
zxlzpXVf5&7;_Q~tFbr21<fMLQZ#Ev-+!OL)F~zhK2apX<8e14-%ZqupCEjyejko`{
zkcOvybr-39BI(q^ui}>bQKv!xG?O&uH!NTDXxu{m<5f%H2ioNml<P?7l00`~3x^e;
z2A&5Km)M^B5oHl%Rr6G5itHrGGwxc*uQg!x-GdB1z)4la2(PhLLwj1b6rF->U30)W
zsh;Un+1A4Zr>_xMrzDc5s$1qto6i=sj_}BaP!xxfRrxl%&{Kraq8ZrqF>zgBqVTVv
zGzf8YXe}+9MmZ1v2zY4F*B-|rcy(^R>UK<E1>u}raP(!DUB+G0Bkl}uMZzU`HIKwy
zbN~H=69_HE4IrBvF~qhi`qA2dL6S$uH2vYcmdU(aAjcR!K$W#pp1Bhq3eKt)g_tQ9
zLQ?)4d_WQvUZG}k#-H!wRuIk6AHMX#&!;0Q@<WTFDvKDkmWwR4Yh%}dmOhEgoVm4;
zp9>1Sp+hf9P)B7On8?{3M#C5mh&0MgRbgRr=>r=MtCb*lwn~j8B@W_yz$c5y>A)MC
z5IGTaRYP9Fmz4v@i0<;%m5^S@IBJc<*(+%deLu2K2FBD^-~KX5E(?Gz2Z*)jubG3G
zp+#FW7c;yVU>mW+CX_(f3|?A<vRQY*Wbj5veuDj}xZyK8OZ@$2Wbm_x(E)HLr;Uhv
z@P6{G65JFq?B8V-76oJd`Sw#w4<qKXN<1s)IP_-LR9qyW4&F$(<nPSi%G;XTzAWIp
zB)mME>RqroFvBaykE&kKXX=+=oY_FsU5zg+u1dWfXk``9>pNDQPC#(zx_v$UD$Ud?
z&nv$81<C^#WzYXw>g+>Xff@qeC($@I)g={%c%N&y_IL;fblAqYNBQ!lvC@Nx(-HCE
zJ%8@)!&qn92}m$s7Ig@jXXIRLG1?PzQYMQah)Al_Nq%HHbrf?s$hKr)rueW6%Y|A$
z5KAmh5ORTnqcB^g!00=OCk9b%If2AJ<K)9n#YB;H1h<}9cIZV0n?b8<qjlJRsGj;i
z;HRwTi;lH;|0h!LJfZCR(-sjcw3giCsL<dym#q4~R4{(qma4auY~>D)640lKjceS5
zJ&fdKAU1+d1D3RbwQJFC*hZ+H3yu<h{^GB!#W1Ior_+=&jGI~LNx8+Q^X6#TzM!vv
zLdr)*QC6f@Oe}mi^U#yz>aTpjiGL8&h(M#gst?v|r>(QHXu$sqdUcTO5JeX&(U10J
zNYAPMYcRMY2ivWy&*=XY_II&uA+lGU{1a9^#lNPWK}md|hwY=;A9J`Zv4~a-{_SGZ
z+ZCkeMAm8Yq{oCT+@K_>UApSz78PFRp>QGp8L_xiB@;+mqF=CnP8ZC3#Y;W%A1Od)
zl;n(KV`FdbOE6`M9{FH=LJ(rH@f_EV{qC9iB#cDoW=9;284DukLBAJf2&~`b1(Ql@
zU{5ka;FFlPO8&K5bJ{9o9;T0XD-m<PocX`kJ1!gi*`U$%rPP8mJ8?r}P+2Hla<@@t
zTnobLVO#TKZ#4O9YT|^k^CReE-vH<<o_sc;BUa0yO$ep<%IKWhciK+TUU7VU(7!_O
zi+>%#r_rEe<B;!3jUz*1q)R3&OrSqwQ?+V4jNlP$y^9EkZ(+3)%H|`vLUr6m+Mu#b
zr73<#ytXD1XRN;*1HmgROV6=FWuh$fpg)RQiD;{z)sot$i_OTrH|OL26}#P)hv9mG
z&I3IMYk81$-Ak4sVo=KY9psHw9^>?bl^}YQ)^!&YTaooVpewL+36(FNbXt?Pq0+EH
zUNe2=LaF(3mMBLd=dZY+yiWs|obG!1za;6T^$Hqw*u6hd8hrts%hhs6bxeZg9UP@O
z+0q7TXYO!8uOG&hCU%F?%jho%vWS$&o|e~@^bkR|Ecwzhr;u*P&c)$t46Z@h;t?q`
z2QQG`@caE?plMi~il4hqDTL>;4^30jW554(bVl~9k`Imyt~@e&B!=_>ZBRK^h4$IN
zo*kAx$Ii0kHsYUjNt7o;Xx&H!J9*K1gFw@`^14DhY+!G>uBSg1IH>$UI@-96Q+EAi
z;0FPbC)mZLmpL~5GTv%LldBQt%=+ZfdqX}1QzLO7wifl)=LMRkS;wvXWp*%6yUtNL
z<<&nz!4dc*?wZ=mfN%}lfwT=F(thpTiJ6*jU2*N=n)}q%OC>E0F|1FwV-pW)$OH1*
zWahhCkZS(Qx@CMhao8waBo*O7fl5Y5pI6sQ@eI=l0m2`LOxG>ram(kwgxME}^5+1x
zf)*vOs|Y$rO8Ra53Orido{WfyKF^I-x9DoW9{z}MCyu<Z5eta(t0HJ=s@k@}N2!BN
zUOV~xulYc+>)$!t;rYvY(H*n%NUcdqyd(R3{Gyy&TpkMC$ev*7$SaoPj;1Okug@)F
zxJ=6hDQz=JLS^#^mTs$$;%lpOYVBBeX#LZ<JEkj3Mvx7^0&dk`d76nu>5v#S3gK5i
z#n&?*+88pFZhR2|La)%H1hh5g^{BDw6V*TLXWK^cdk637rp^zMp>;G#MiVj-qIIxZ
zQtDE4Omv|6>HFpHX&BSKsvFbAr595?l-{dUdjYI8*^SE|?M}mR_IzJnGup$S1-vjY
zJin01cR)$c-L-GEnTx4-RD}#p+p0ajJjckyRaTy3Dnrp}Ze$eivf#&ks3Gy$S&j9f
zvgMDZ4t%{29oPDqcpMu>EmMw${h<oRf1+UV*t4$+rD(rLt4M1(zewyRCZp^1M0S3Q
z4J-_{RE~38RPFowAsREUV{ByX4aWoDi?|O)z{71c#kd<SjWYBohm!R&fysU|0}s=F
zrPP3pDIvJGU8dV8a=3K;S#nhEC@<Z!U^x?)Njx?AC&M%>dt_7Lcj`lzBKRch<c22C
z<Vgo^3Y#XmLAS1C3uhZx!lunQ<J90}{DEUZwoHtto2<_aE^W@9vB+M<kg54P^|IF1
zQBw-z-}80LJ5t{Wk3&Syznux%9NE7m^&6kf;4`I$5ko9ryKI;er8gKxKF72xS5L02
zu=@%bgmja%1<PqVMjZ?kr`(N6<9rJJP=g<WJ_~#7&EP3KV%}gwi6J(7TgS|9Ln8pz
zMYp`1V;&gPQ{I2_(iSkL3vFCk*LV7Ht6A;nd~{1O3o~l<TNS=9?2LN*wv#44-G6!b
z5NQNn6bAi+r<xGWU`oMy%|o@-DRpcFW2>(A=}ULTPyAXkX6Cp3c($)0e|dF*WNo-r
zH^Q@OH0FxeIHBk`(u@H{45{X-QwyE+E*Z5*Pxdn4ba)9Go4%pfU*$3}$4K2GV!oDc
zN@-w0fe6lnf!|oU3|0{Yme-qUIe7vbuMq*2LTY<fXFwQT)r;uRNVNUiu0E#k4QfCn
z<=>ku(k8i@Jc-!CPg_1F>|!M1&G|<|T*Ta+T4~`4@dUVSFy*ARlASvyf*3R5@Sji|
z=xEZTGCDH;*jxsRpS7R8SpZREvE6DpHkSqBuyC-4Gg1#j`(F@_p&_CD-%HAv+i!_G
ze?pz)EnP`@3drD=cgJ)#8dm@AMhV>#^!rPb%QMo-30)Tmi};mCF6F*bal?d_NW5SO
zY+xv**2HgO1%^v`KXKZnX%<ldCx5S%?ba)Ybk?ndVpbZe0I!X=bK?%f_@96FzG-Fw
zOC`)=@2C@#{*P3z6{|Yi*c>(6{@q!&$~v=si>I1MnR`(AKz$a2F{ekqJ=t&)8hu6&
zmt^p1<mWs;f&L8kx?&5RYeMrM;qJ(*r%fqMP&qfgH<G<jhXdQl3o1?pc=wQy@((Z!
zkErR)cX1Nm{Q~-Azxr?+rl_qy`Fw6aKgVyYvQ7xhdHTzy_B={a%!5haA&+K3`nilY
zb+n0wnI2_WdzhTT?}t(Qvet;AbrACr_n65+!)p)fwcj?=-n>0|b<0-~BlQsE-jXkx
zhr+HqaC%;Tf;^5)@ij#ZWV@Z0q+Qt&9!?+H&Qk674298u7AUZzNd<n{!Vk*4G%Oi1
zC#kw+>I0S0dOdZj$B#{Os@v^47~~B`;O2i1$yndk4w{7L*$uYMUEfP&$HVy9b5Yj`
zMeLiFRVu4NY2dKO<nR%XPI8O`G2$FPP=+AjTG?cyEs}H=={uTeDRNplt24j55P~@x
z_R!B4r6R3Na^ABFZUiTh3*5GT1F(96fxw^4qS`oPx`arjDp_V-#6AV`eVb0GVO)<O
zs6Esq)Jmscj|>(r%$an)6T7pQinSWb8TPu|n$KUP**QD<IUjN6G6%l}WpA_2ol4S-
zFZmVVinvH{{q-Jm{UhwHxInv}1mvNgnw-1tVKM?I|HwPSRaIUUb~)h%h884ASd3Z2
z<-Y`nL*1mLMzu?}-DbWHJgu2eMz<iZ*2*oYm*v7AO{0DtIdhzt1qJ1pJhb(Ha=QN_
z@P*K!|5sgNk;3oXou}o}op#+2JFHYRoFm#M;tj*1Oh}354DQeJW<yH5olK_x`o1PO
z9g#;7I7n?pKRL<u=18mpU_gCIx%c%l?$J}OD60Unxs$z<1p!`osK<&bw>1sY8Fr;{
zxDg^X|498u^{n?^TV#7JhGi+p-TgsWalQ3e<bE;N3dJ)%?*`83mk9ef{fL1P@_flx
z;vC9sy0hIkSmmji_T-6K9_T!v40b(b$0;WCFOim2p#F`Bv&#gA>(*6}c%@`4{b>L{
zvR@XhLUUmql;?e6Go1*eCsZuh49dM81g6v!&rT!Ng;bx$KQM>;AYQE^*=tB$ar7lO
z3pOiisEK)NeS$u-g9vJ?iit=&-b^nBX;Dum+J#G>bkt{7=zQ<8ud4=3xPI9qB4fvd
zH{7ZD%YEft1m1^b@5yF%T0h?!V~7IzMEnK!Mdtn@l0`4iU9A0Pn+<%_?o*-coA8Sq
z<)psKCWWBUSqJ{}azB^cpg|{8Ka5{Po250A_(JEFhSg13C|G6RLRx|_Vs5htia1cD
zi4kZ0AqBc-4XzMogB4Q#%o(o*C`ZC8M>INp%rI;51*kt36;?+WrWFOlODtcmee|x&
zLKdMJ_lWKmYAeijQ|`2wf#p7$xnILQbCfsM2`aF)d^yRbqJglmhxndxkA$Gh#EAC&
z##YD*4uJ8}GL@<BNeLKHKj~drO;?-}vLaSTK&HPIPd0(AvCzEYeo@~(dFsO%pQ0YW
zQe%(RH^Zgs(Tt_lKtuEkQG|;qy%UJhwmKEKiaxH8Lt#}aE*0EBn~tZM*qxpco-{fT
zZ{1U>l5WUpX~-|HhYSfs5i49O2Sy(nzPM(LxcU7;^}t=4RTfo{lX>Fb?6GO@+GmRn
z_hsUx`?aX+@wbLc1?VE%QQluPs{!edadH7i+yKI>RDBH*j%7#i1h1`0#O1r^>>_3Z
zot1jNeW1G7gTki;xf|wJ!nyfBx#b%-x%>6(?|p5YMxxC~rN9Tc3gQ;*pduHyPq7&t
z1h9xABr;u&vE$!spn=GHECDr@<M!L|vf7Vh;wD|!2q9qBBdK!Ue;jQI1`39ZbRZ{e
z&&jfN>L~f)Rw%MXD|D^B6<)XTn)SWi-9M3ldD0+vx@vO17pd{h-#a@IC_5WPi>4Yq
zq^8!fxg#Mzvq%0Zc9V;q`AFkxREgrITqUJ)?RTgtnBNkb?MnWOeSL$(i+r|*j6RDm
z)<+qspkW*dnO{$+UVVyR4U|e0Puw42JT$(Qirc~N7@9&W6&GtoUX2;-xHs5jN5E9(
zY&VD1f32O)wy?lRnePR#7G}c@e$;P&-G~lp1qOqUa2t>6uTE)`%zBGPl4GySqCbQv
zj+Vg`?Xb~QA5*Hx9ZO9dsvG>hX}4IxonwDy0?_nbT<>Nm^%|E1%y6YB8LIo2IlHNk
zTtD}4oP4NLs^1x|@|FI!kUJdVksHq|F;@A@Z?P)<C0pyMt)Cr_GK|z@C^irnBig7>
z8H#XIm|T2Kda?(H>?zpql$-@gA^EN?u6i?`<%<pwY{GfJClICa$mvh&eVxzdSJ5|Q
zNkmx(CkdO3=c{CN&L4GM0%xqU`z1KUOX(4x_NnC{osRF*Cj5AS%FRoS>C<Z?yo63i
zsJsGo=|WIKwccaG!z2w;G!Oq?a@i-}ULG#tFe;ko%JieIDoIMFT8rQc+aEj8A3Hjp
zbEW>8AFH2+^f2(G@U4z?nc$(vsRuDOhQwxlR_A)m8uzMi+6&;KH}6u_UTeY;GN%g{
z_Dw(XG_<>DZf*D3j!2r#k<tz#k=CKZb3ST5@S~#OK>FK~r)~jYX97`67|gANk@!O-
z8Haw{O9i7Ko7*qUx?k3^a9)QDcARV|H15QVw@{dB7dKMJtY<!|$a+RlvyA-+Gr`D!
zDFhIz>F*j9V44iXA6KbDEf^>&g|7D+&;wS@d%&EA@>i}@6b{L{s$wU1gAd+AEgcH$
zokp|Y;>k9dqutOitK-!32zt{EbOo0aH{?SxvL1H&W~3WB-TW$C2`cx99m-`d|NhG6
zt6h4c+{&HP)hEpVEMM)h2L%vSsUhMT$dV3wxecd2rZc0R@KYTrH&1t{ynJpSw3M1Z
z^v#frO-V!~&dKYH1&jQxvFBW+f0F#Nb(zsL%{^UZ573FO^6C`@Qb7b{JV@$t?m%J*
z`li1&HACF&84{IjVF)iigs%Ammsh|RLZ-_{1Ly9`w|ya9{m{1E467yK8{GQhy`|e3
zG5jZtoCk~XKj_ewOh%cWeUE7Um<@d?Ig6aFPFjnC*$ZB?5n~t4s+aR^p}*=7!w4#B
z8NedIz|UaE#nSc~#IX5Q_^)t2LT4+}8_h6_RS{7yQ&$ameySU7Ux|LeZlmn38o{d!
zHn;Snfoy(<>jZ6%@Kev+c~ZhFS+UP`C<5&IOo4_f2+onM@q*pa@r0tE%KzcV8vK3z
zu8+nnzYS|mIrg?k8_9!>$M5^c`jx#kEiJ-uqQn@R{dCd3jbd08vGRIwRDo`@1%v*v
zcN_oC_r~_#Qqq0c(Tkb>w;kGb;96hsBtOYbH|0ALUHBp`<4xukkgidJ7!a9?qET`;
zlJ2rh<Y6EYa=Phc)84U*syML`QyIE3dey#y&@%i$@8j<=n(l0OXVlQK2M155U__Ws
zG<R_@JTAgC)Z|irw^6Bhy@F$L)mn8-%R7UX77>|sS15|4ek|D|G?;u}c}YX-3X8ot
z;GRtXsGocS{(1MbR_9OILNuj_9KBhsh%;`ecY4pCYMnr{wY8U>za4<yplEBy%V9>6
zDsdos%iz<_7rxXnW_PzFnOmb9V^WPcu~|LU5LMaZ0uZE+`F7iVd(kPg(g{fs*`sg7
z5PW!3C#^DZatDs76F%#UyJ1RSvrBYii~s^>vv%q-u5yuyo-H~ugS&$JHRrQIS4^FJ
z=#7JfBhq;ojM?h$+OMA-`?&byE78jaO_WIxuNe|Y!j810jk<-gNan5X_QrK)XCHzX
z&6~+Wwa!vvI%S+j8IKnBOU&rpSD4SA<e1Ji*DTtv1Hb$l94GXhS`O+d&eCjvZPbaY
z+?HU4Q`Ej$YyZxWFjoI~aYJ|h_m~AiPL;UDtl~ad;;5@*bN$I43{en_@z+jmo`^Uf
z(&<P4L-8!tb8L5&D_V~BkMuFee_yNkytqOanFN=t)Grt`G6EvgQX^DeMv9Y`m-H24
zI-~>EUeHA$F9(;Hy>_=vVLH*!qH=q8@4u&(L)Grytk^xaue7&>wH9`0z%}ekNBvAq
z44nVHyMqXi_I0CBf;ChD=Rkku^@WUSXb);3cC)#)OnI>4W5t<njTS+0WUA-upYN4I
zKRLp7O$`~%JNLd&;MR`cy|moQ`Hwk%ShFB{=5j;UF#1S-LC2(f`fc8|%zSE_Mz39-
ztLY>v55%>&I^HH<ytBQitz8X~YJ#cwgvV{o4&9Z>zA)<f(4C*-+-jbW$E1B)rd!!)
zPWWM9h$?RPj6;+Ml!-apCv_^4oa&i4q<2*nLHK0zaq44y#hF|1+n(PV!>y{+mWL-^
zzVGHI-KG^*i$w)_*wcqjsa6IdP!fW5gd;DPn}J>J^decTNnMrX_M6c5bDrM$dRFVk
z?(SO$;@U3aT8n0DKR_nP!`kiq$~Fb^C<bg#4FkhIZEp93{5~Ct@LOB$bIyI%xbH?k
zFJ~4;w~{z(6pL=v%FU2qX)jwW#@Kwq2j)~!cu*)yt*Hbiu`A26=k<MoA(QY^j8M1G
z1@DyZmv{sF-q=Q4C(@c@w^qq~SSICD%_gVXJ;=NBCK%IS&eVplJ)8WQjg`wCcXt=M
zKBs}c6YhJB3Od+`!jrACYThvRc?pn?@lGYlZ{H?hPS=dEc2<j6yz`O})jw+33}5S;
z-DJ5xkC%$)ycEQX>6m#uMF%lktiu}>C&&q{^-GMBG!qby)R#fa!<=?)Vi{eFI0AG4
zb~wE5&G<{(KXH2|Vf*6|=XB=M+)lBzng_;b-ptuJK&eT9v}oP>rkj=Zp|G9;f0OcK
z?}ooq;N3&QCI8CM+2SCM_4ys|p*8V5FKy+1(gP;&Jrp&Lb!?oLnwmbj>tJU#CWTuL
zJKiv=H7~y&7!jl1u}99aJ4QV_Gr6gilNHyS;Vx+uMzYJzh3=lxMw-EQ%7mJe>sw%C
zf*{i=Cc-LSd3ui^izDvZCZrn7S@`ae^z$MQldyq9ATF;^qY+%8S#E%Vg%U$Q#UtHE
zFyofFZqo6?#e)0NVzGdW5F}oiz4IKs0+rV>2b1tJO}%GL&MH6?^wl<+r?Rc>W_ZyT
z-H;7Pj3BBz$<tdnX_b-@AwgCMDqJ^UrRG}SF&8@BJWCGhQ6@XMavv?$D4l;5Igk~1
zU~RD2I!4KWUpdHz+hLDmu?Hm$&hW}PzYxVfTjO}~%LO6GmNgOuBE@sMWW0U`h@O2R
z2Q7C&^{>RRaDJCO?cTmMxx4fWXYqH!he&UeSyVqA|2n#)0Q{+L&@sZ2L)cSKr`JV<
z?gH)}tRI`v)VCaM!jR)oUyC0DHVIu$J2ktzE$~`b#XJE|J!Tef>VIruO`t@2&6uyQ
zY<yRZu)PGXJjTgU5muZ^Zi^2LHkg=1_L5xgC_Q6;Igqwx@?QtkL*yC0vMx+6G<NPw
zBgdedO+tN4{O0hPJD-&GUh8VrPwP2%kXRV11lF%l>vxrWSMCKs+4N4a>lx$vI(<IK
z8Q8E;aIZz(QT@WUF6h{NoMOGu_XqTqOQ-#A?9SQe;F@~t-zJ=aZ%UynitfiqO_abK
zPH&&gDVL33QU(-PvZ_J(5P6V&Qi@E|S1|z}w0=Ba)&F%&p?{7MoytO-dl@-IdY*Jr
z`4&CD5yEI_4k`-@GqXmz9w&|N_yS;&{`FkJ#;10{)RZa19`@3+I2he2r+!%E(0GVE
z3S-n9hI8lj!nZH?PmNinj+%fxa%6ma(`RVyoI==28})@*nMe}WPdkruIx#^7Nq_A|
zx1d7<M(B+SjCbXE%ah5E9GJ~3jI!&NlIcJj%-~Sp190vbSF&mi8F0@m-<iB#7unml
zkL#O=!u=<`QatyJ5u5YdZ;=er@IiEx2dik+dl1K;Vb@NC`Xw@%Sby)q&an<JE!TU2
zPuT#Hp3c;p-nY_2H1zB(WL-E~!fPm{ab**KXS`Cep4dlsUM)s`;DQXKDy!L@Kffw1
zL%7<1m21S4l5!ID*95Y;aV2ib+fW}=mL#sSr?rYDgcs6(mn*;rp68Mq10oD8w=>rn
z@5Fus+et6NHl#>rmR9%bzpfs>(%!q1ub-gWQ`q<WYkfCeo7qy5A--}uS}<vLi%eFB
z7U^H*Zob7DvB*K$)HiuS2R<=G2HZJ(Xw%`l4Y7pCGd346NGMwAu*dRE`}qm`^^K~%
zny}?m$m20oXrM<(CK}BnaUc_|1!={(9jy@1*6A#iV3?O}>pEOhTNY0IiN05@l3Kf2
zcTRK4_~8Gs_`uE?)UCy&$EW?OfR%;|G&kF3w)uwxaIbK@=il3fBM+=Q<yFmT(E}f;
zb}L-SW>RaN@!D*fDUp#tH;t{{ipzFQMMG35xE!s%$DMY0E|?3;?eH&9i7aJ`eW>AA
zxGmutH6~Zspsc$6W>&5{WFk_J0Bgy@J0uu;hYhB=Uxq?*!#}s5UC;~Q4vo}7=e_k0
zqFi@T?qhD`Xe7BO+Ch9UsCu1R&p3e(RGgX5A_*#_mvd>aVvy-KZ4l-#ppT!=1Pq@d
zT)^VV^{yH_VzAws+hx;2$UBM1ndsxI3~tV$`Yd!H9t!eFAzR5O)bv>0VX`U_|D&B<
zgDl(NUn1rrsmr@-2?8*u!G-ac=|cE8ATO39UnbY9SnnYwGD5bNGl0a=@+%ZG)<ND%
z^!n|{;cNTUg>9$`au~q8YjeGcQ|x{~c{pEZGOu@k6<?s3=p_@9+4$$J3u6bAKBgX<
z#{UhVC^%Nn+jKT7dN?!+79I<+A)Jl?DowQ5jejN@%B=-aZ{8k@1_oqc^HkHV=S{_S
zTd}f*%}egwK~_x4>KA))f|l5dxbhck=D(Ds404dXPb+u5!^&EGi483l9K>|56*I%^
z{<R@Ea_Iusg19Pg?1qmGB64yXgl&HsS-;{U|A=_0zpzLVGq@qx+2oa)+0%)QBWK?6
z6%iH&6goik(>M04@!}0r1C4>TbiwGAQuxKWpY{6(@S`K5M&pXDAY4xtXd_-sLI%@&
zn0S-kAc8Uu@4@m$V|4aZ?J@JzXoC%2+cz$=M;;)3oFh^~c_Dhpud*um#&u|>)&n}E
zxAhTB_7|MGtrtIW_T*i(H+dOuF{ELEvKpQ{V~O_|tF8!A(tf9=S;p)YC$EE$3A)=;
z-dGnxfPQF!O4q5Z+Ys-HvZ%|w{PPc7sFYp+Ppm+nrr#_Bij~6`%{L>|n>689{pb}#
z&4J?9s1?7yYi`}aJhMOAF>T=J%xRQ|6}Vr}pdq51pFQ~`jes~}Dn)?j)M~B8Vp7L;
z-!f-t2gyy&gfJ8Y+Q=G~2f9m7(m@Ni2+SEqbJYhJ*3rQyU8Mm-GZuhxu@iG!FY7jv
z1v#Md2cCVaJ)CtTxC}H(5So(cG_%Bpr4MBEoN~ZwldI(PqlM^UWjA1uS5_wFS+NF`
znCNFicD+OnDsBl@F5|k{vP*rugzr}nc>aXW=Tu)1K$BX!^&u3`d(XRs-~8g{9lxnD
ziD`61`OEg#?o;{DeZ3)oSAq0%R_C-V$DevAnyVd-&*D;fm*(+{kV}}?MkO{Hc4^d$
zVN0Mv>o$jfby&OD!CvT2L0iDS7Z{s%VMQP{jAP>gKVstL6SkUhBO`!N>Hzo?agmL}
zuSh1fvj^7|-C()@(K}XDwqLhBv*RW^ve;~Cnji!k^hRWWUxmLO-t7_E;_-9HoUU=2
zJ~Ml)?+dgYfzawN=PMyMBVI*(Oc24w%4vVZWe$zOOF%l)#N6@Z!Ku_n39GpkJf8m;
ziC7v2XlX<CSxw?W5ny~N6&q}>G=w*J9}}BdL@a|&BX=mk{f{WYA0YA|_5h~E@ip+O
zjcwsuAFc<D^H|!FM(;+E(pn{y%>5k+DRD4^i=i~=8%X_G(()Ax!y6_&L5)}1BJ!FV
z_G7fUZKxAQ%LOZfsdjz=3l)f?2LS9ihvIVtw|({GjemF=r(YoaGk^JEM7F}OQnEuC
zNrJuwovfoN7omj<(vWG48!uS6F=Y<O;HPom!k+C>fVrEFAlV^BD2ece#p8uIT$i+W
zBD9EdwI+7ak-rc;DGoSdv|VM(vrvLK`bLs7lNS3ummPOx%{kK!6|)9<ifjwE@<&90
z5WzwL;ush-85MBEz;Q#daG5Y3_?@l;KNLLsZHu^PkiqS(<?y{t-*w-h^z4u2h#N||
z>{IQj6dk}xv>ByU(;iFWp9yQ-H9q*XGQZvz1)7FGR!c~DIY4scxeVU3kt~FAE9Zjb
zM!B8M4V~88Q71Ns_LGFK_^mqQ6Ev!NT~#AdmdN^>Gu#%V#WKi7u;j5vK1{CfK^MdU
z&0n5ps+iGWh_rT;5#$<cUqBGnBOlm#t>Jkf$)JNo2`M5Tgo0o5O>wDXpF?bc>NV(8
zOi>A7baWXQ&z>#equ@a(j^9ffkRElvd?_BQOqh>Fk^k;h(hie9HZ{4cCa?W20Heq2
zBpFN(RmSg)iNXr%<8Nb&X(Wv$J1Sv|+XrDl<dHLFM{0C1*Js==P2$r&U!>b%ilxS8
zjA<|#^wZD*%Qv1Xn^@UQLbsOL^<va8k7PPfN?p_JhVjTuLI###bAL6T3$-&nAi>7~
z5m3}!@>iUf^cJRC37U}9b<6>}9({O^yvbY&Wd+(Q6qZHr`;aPyU$t@8f=tB0KXn#M
z(<TQ$sY`5>IG+EZo(nylXYw}s4Eh!}J?Z_YzBf_9iX)euq;L7y+fER==99fex7SI{
zKXEr8of^J3^QNRJFC-B-Su1&{st-G>+q*HK084BwZtyd?GBNuQ?vg@GV`BJMs&2|(
zXq=IOCuWD5SVI0{K#?c>VuULf1|OnI{!GM>g!Xgg=~fghwx0OWZYc;}K0wC3un4M=
z)|RDIBW=5wNi`G$eTy0h@>SbbitZvRJE>wtSOvp2@(|?HW4^8VRtkX&f1U;-04utO
z>#UM2<xLwi?Qwu=d<NbJ)~WR-X-WKU_?Y^?E!jX2t-7l;>xRWi(zb=)=BcF_JdHCl
z?I;Q?lA!pn|K8hC2eq2J>Xd&YN0+BohPXxBmN_sSK>U@t$#1XT2feSiF+d}#?J7YO
zzRo<x=O-U$+2M<6P(`Yrs(BwYNX`S#YU=NmX#|=SmR8Mp%paQ)mfuo>B^vCcf`B!g
z_*nhl8veEx1DgECv!C-&T<y0h@g&NpPauApst^LFcK?P3)+QuO5TlwdR=a^l_b5Ar
zLi0cpSmcJgZ^#u&5Fpk5Yl=acOBa{qn$^0ip!vo<WTe$dc)fTczUo(VxZ`n>ad?nz
zU0zlDBbVoC?5xLpmPLMM7%<~-=Wt-gK%MCi1R@N8$kxb~3MS?&y>V-EWB}I!BgMpV
zlfTL5?{r`VA{v2F;k3L9$&a(YFx7ZNEq!8lB*1j>uvFBDTaH&zfdg?;N56qK_wdI*
zF~k1MO)a!XUi_pJjD=<2^S<w@jw_eE{(ajqtG1Ys53=K<ZDP#H5P#20|4nh}r=p9{
z;O*o$0qau=Fl|lF$;><&D35N7nW}8EbW*pY;-<qrY`VCmMGhFXoKpRNp<`U*W~TyC
zW50meV8LsR4E$S0);sSso#|yB35a2Y&;;u$#fpPeD<TIJ4iA5&lO1Sb-eZL3YSRxo
z?+D_F&%ozq#))=DcWfXLoFLa1nPedxjO;MCHux2e$r(2kE7a8@>*oKW=DF~za<L+@
zfQ!tLR^q7G9XT-l_<9XB;x^jrY>xL;b}+UKqw}_!ipQ_EkViyXT?Sr5mOyUN>(Ur=
zQUEy+?u~CN8{h6+m&DYzwVcC)Pt}5IK557*c^*vCYhi>y`@tG|^87ha%5=@1b)5%%
zcnn}>a$x_WH!q2E*D1>bxhJc?OSf{aQ0ynkZ{SrH<<n<L97LF!{FMPt@1<KtPZE&h
zcR7W>R!hND3zywg@eY``4PmrVXc06R0DJebu+|XB?URq{#HvS1&Z(i69Y1pGLW58B
zf&FdHuvYRot+zf(3gp-Q<Kw4HD?zL0@f+=_3|kIxaWpWUXI{?FH~EB1t!VG*ocH=p
zch2L_hH$EtfOU`yAK$880I;)|3scL4z;17kAOCCAsL)yIBnUS-3!Xff*g_<J8A1jg
z=7Ew?{WvYic0`&6%nHlxUx$^T>;bFjQ9gg*BzTY&c-Z|-R?*{h^il^BFrJ}zMFdbr
z6n~J+t?av1+ZPe^aw)$6&y$g}Ecz$TeL4<<j|C!XEc4=2^HlBJ6Sfw#_W8rB6GQ@Z
z^~ZKz@g_gh>8k5l9)AxSlnc#mlW!H<@aM4RFpD(}Ivi){Tl6$exK4Bo)$Y9b9Nd|g
z1=ctMNMZ5#F56={cFjv<wC%}~&mxOKj6FM1%PMMGe%t1`8`z6DE}6XmfW&qc6Rlpu
z#_*Q7`cMdXGr=B(J261?g*)-fznxy4t>=F44&bQMJtFUpdHl0jA6pMc)i0O>d*mq{
zZiIk94j^Bak074i;~1!ln-ajsz>&*ZL(-SYr}yHwKRqlIUH^L?2n&n7?f|;<a^mGu
z`muI>lxC(qmDbLeT@x1*o-^0^z90bV07Bxn38tX}$YHo@0j1)$#NIb83idYkGvN`*
z=YxnM+tm6BG`-eDDOPU4Kb3V6TO3p2T@FagKxdS(p{KIID<bd`@{62CsrZczAb5+a
zhpOrd?~z7P#b}GDri<=rPR*ch^fn6GvpG>Axe{QG^VVcv5J8iFm$ohDJZ5*T-NJh*
zEIXi!csMD+6UM$lcJJ_^TnHS?j2t2Z(eq)`S3#-z;|ZS^i3ONZtb0gI0~5W)l0myw
z<0Z4afVsB_v=N0hwopEwXwJNv|6s$aIbi>aq^C_*2m#3*O}?Gte4+1_qoM{BH$)iD
z2T4{h2m70mam=_E*>7UaUvRn`fK%+%9=lHg7T3P-DFbZ;11MkFslw`Ic-g*audz6(
zSWiYT1QPMLuR9?Sb^+dGOyc150~@X+P=k##>uJsT?C3X#&NuGv`3AGT@^hJ{C;$g?
zYl|sfj<y-dO%~0e{Z*iipge8T^7%*#lUie(IR=v7f{X-h<N&1VLzQ%%(Q%v9*)`Mz
zIrN0s^Ht18&Igf**Gy~Urw7%ryo0mrL7i4jWAo5MBTZ0QZe6agMl~7$35IbjR~i9X
z*Tc|o_F&1L4=+D5MjR+5H_QK3Bdud_rdpEf)$g<CTeHZ>1Iq^N@Yu-dPKO<2pom2c
zTd5QOA*8w;xW-dxjjJty)uuo*<JaR24%4D|uXZsykaQVX7(uF&#lw*m*SWv(65?rX
zN{&udlv2YHXL37YAY>`O^^-G+xh4LADuMBfNWT!HbvG#@c(G7AC)o+t`ZDM4i8sOk
zUPRq<K>kV)D8;->0amQ}3j&ydK?bMF8tpeD!BNiKk2FTHO!T}uMZCbv04N1#jJA=5
zv#kSk5S{rPoI%CBZ^m~xGDU{IrYi9ThF1WFy^Bj!7r(rj0^9&TBMlEkX9kqJ71zY-
zro(gnXzs?CZDt?Z{`Njo@uPhPy8Ctm=jUNWtv7eT52%1-QnO{LW(O&^*m8z`Z1>Ip
zCeI&3ES~aGLxX}62`1916HETTs^LVp=2+!RYW4wh#Gpv=j55K9#KEXusF2hGIp~ix
z_^+s%$0T5%3L#>RWNpj(>^ozHtV;0C7Xbbs08WSbs`vMRzLF!PDy!~u?=!EHnXO(3
zrKV`;Cz~A1p5BVHe*IAO_j_8b-Z=MZyn8WS?>pPmxc;efvOs{|l~Q<C?Cvhhq7C;@
z4p|lUIO_wm+&I8<1-^4lDc|QciWk6u-Qa;-gB!bhgcW>~ayyC7@S3s24ydg?!$4Oy
z%pw1lBGx>l->q)Xc|7UCqirkjndLb<K$^7+NcDCONr%Wo{dq%B#utmg4@PYz&z-`l
zt-BlrY!jBeu#ABtSKQ86ZQt&I1^g?l;B6}@_51^~HGY25KA5R_Rwu{@zX^HCm84((
zfQDu*j@zPV8uV4@V<30Mq=}F<KXz;UuUL0@y>&_aI^<DL7cu}1v?8oc+x`6t<44fq
zz@e<R=Crq^1{@c1?oVJMt9?GO96o=yr0;J*WL;S2l#?AA@U}ws$KR3Iq2&N|Sc1nS
znNU+vsn8Robrg?hx#9|V#%FgWuDMV8djz`%1X41m&8qB{2!6r(1*F$<8(V619{<@@
zdq;v$ccv~CX+eZ5L8pgtU*DaxG-bD?|1Oh|Ml`i24;VNort*(~D+@yalW<(jf1iFb
z+X$9hIqF*hef>nZ<f@)r8kHMfy!#emoHn@Uj;aUP`nRsRg$F?9(<Q%ibs1R;cS%8`
z)KzaRY7a7vT;g$9mI4fBmKw^bq%-SYL{Mq|l@^|@aomcHt0KRjSa?9#!<!!>Rkx{2
zjq94S{K2xR1~bMJSS)^ujI7Lyy>m8q2U*4M&7}YA=~Z0BJN{mvAZ1I-d7B>eT(!7Y
zChAo?C|T)HgruJf8iB}T*(zi%|0VU0^DNfuyK49-m3Q*lw95_pT9NOtH}cN59wpVg
zrADK7ET!Ji3G^v6ojI9?wj51$lT_z6N0iIdVSVvHLsbKPrh3YgB~I~j?10*9!u7Df
zbD)r992FGYqn`U`i*(f|$6xo;@WYD5<WWWuIsWj+i?TOjnGVO?$_+D4eIr-Ur@%Q<
z@8Xz$t|QGd0L?>=_sUO4h4RVa;9s;d6!KmpgHC&HCGeVTo?(#DKrrZ!CukMtQI?Tn
z@o=%BHA-bl8`C$Jm%cf#MjEVn&#ojM1Asof<5BzWC?5k<2-VFGxlNBa?&qK10IGw}
zdU%n7X)sSnM$1juX-k*Ft+zd24=;@bgi2$4A-j9GC**^nbx!5%GM@mLTk)qYK5&tz
zwNFP26H1wP+WB2TY=}&r@D_Zpy%#b>b=nw7x6`Q%uBlY|6rB(^wKZ3U=SEn8{}iGa
z^xm>Yx2xn>L#c@^7XSjo{>UUd?bjyrbLB-2$j6Q2dL+N}4jKYJ@Q6YCnWU*S1#Af#
z4-_SzzkOV+Z2XzUs0@O=)gtg=^(&et_|*Y(wnz*&eLw<&tNT-#U(o4aeOj+3bpM9+
zY<x34M+k$4Y_kVggeLV4Mw88-yF(Em4K3z>V&j}30S6=KOgPYReo^ciEp}i-NRIw(
z2C%FEVyLOl;V6q3=y>>c4I<(;7)={B;7oW#CcFA`ENb)s$YK&Og6hJam8)frG>J(V
zg@FEsLt&ZI&7;kqg!!#6n^-<{|GK5Q5JYy^1D|jM{uVQv+b2|Wc)x6(A0Cm$oqjkl
z0qer6&_h#2jroW(Z^JOi*NyK!5&(gZnjO$kuTn*>RP>`m)Is6JO3}{3^`T}bwpaC@
zoisH?{krA-eRdbTGU-am9i0D}3d9wXjW7Lr7b9lTYO;BycsI$36lhD*_I|en*>z8~
z>{L-<kjj~`W4W6Y+61~M1YpDsQzDCZEmG5N%vlMba(IQ2bH;2BXx3Y#Qo8S0$1y;J
z^#yk95<*Y5d@l&TZUeKICQ_jxCIDBj`vZ07evy6!_N=%}ldbuFnME38(<8ZFGn%<e
z67`FLoBdnwr}khbL^D&xSU?Cz(fb9&3Dru-9@t|74rRwF{z`F>fiEten?d1ZPQlyE
zHvWCp@+&c)clgl;$`Lm<4T4`XFB|(;rKyMcbLsCMdqlq%bvz=c(V%iUv!A}~@`1Hf
zf|8?!LX{v5B?^9?s{L_(4dx;8$ytO2n541O{G;R3!qT^krxuXbl<S?;fD>^?IKo>(
zPsI<z6p&{4{Z%T?l^3&t8%RHg*X`YH0ggdm9qb^%BeU*!k#r(%i~5_mUssO^qG#FO
zW!tF`<4dVm5c?tgf*_Q0$e@AvhgY`gtEBb+Ydsr+jXwP87hW>>A3-pF)daM==_K4H
z#LxVd(=K?zV9kTJHbmx`?$3x!pXdKPwxGS!O?SPX-$n)AzhDT|r`Q(^LsTndB}=Ot
z>*-j9SGP<B&PB-P7xubg$L}2b)3g~-BoK~c`FS<`kTZ}F81fDs54E=lmccJ_ZgMc^
zwxH`=4qrBhSHxPn`H24s^g!mdLlr9AEk(&Z2II4_oPL@2j?(z3!(Pp9w*tPk8~*Z@
z3RfnLb1``6{R}ZoiSbq?*(xPL8GMjLVUf5Kij<&ogBgDO*H;~@cdV_b%4!x<5-?1K
zAqbyN@4H@9be{h^=0nsPNEt;~)m~%%Z4WWh!m@a!RM|@vJ_-E;y`u__IfD`u=ZRUX
z>$Wn}J)o*wZNz*JPC0WLq_?wM)&D~)Gl}cSz@#u4mD#0^mH+hVd*BgwXg*{d)Nxfi
zW$v7Qpm~38qk%R_iAu&Oz}4mZwuZLwEN-h87ItWfviD|Y$p#Sq^s9%ALm9K;aQ(~P
zX6u{u{D}0LMeU{qBbkjUQMzI6=<gIV$1blVz5AiPV;i{rqt5jTxrZo%TQ?CJ^PQ_!
zxBETLqZv$g1+NojD+6C4-KN-$d9Mht+AgC~UrlbL40;VAhJ%Q`eO!i}d2Pg4o_R_U
zRVDL76ng1CAF)bpi0ys>%;{Ep$EUvRYlL^hH05w#aQ#Yo?iYyKg<}CA9uLT2n?s9}
zPJ<JC#bbsTeA~vmF+a11tmwdI2Mrzo@64hNBH0E@mw6Kstay>-miVDr#3o97E4iO$
zG_$;;i$UAXfuVP`X8yj|eC+sp1Rx@eT0mblo0&X?d;vTN2<l#64w@A3zG{}jeqh-8
z3JB^-t$_UqsF4zT2{BqC#=Qm+N|2gXXU|$OsU9Bn+6CP*@3K;!y!(Bfzo*J+*t%F@
zWS^uI`5vn3wyazL*7!@OSlqz7=e0spz)v@h_YK$eZTZMOQm#vW?WqXOi+kU>b;M>)
zy_Dt<xHAZRhaIdNM<bpZkDmHDfN+C>d79>Ut$Cqwez(-}e0gQuNq!bRd&!jLK|Rm+
z;i<*1wRWPzXdht$mRUz1>ExR73;wqlKyYXmFd17Q_FLGCS%y^{ktvltl%EyT?O9Q2
zl(Bc(9F+&!Z%-$=f1g6)7(6wQTzqcja~BFvn@JN&g~tM0C9i#IE#xp=i|fiPJDfHf
zAQF;KX;}y+hmv;yPbx2yptU&~tZ_s7PT(|O10au&bIdRW(vke?*Um#GCuv7jz#PEK
z{TI*2{j4YL(3%e$ulqMz&*xU`^9V{++OJQAa4zh)?E%*M<2!ZWbv`;2fm=)UpI8B9
z7v3Fb*tl<DbZ+<Eip0D%!qz74E@Qk;KzF)hQ@<9D*PHx9uiU$Ltjcl?6&9t%WZrs`
z%hL`ur|mOvei3{!o{aHLz#YSj2m6x3e*|^^c3d2CcgF|$o{@k5%?lXV#u@iu8(~+_
zzj>^i?>ip(%%cfa3~Jf^veC$jLCSRNLQ9M88LYx{82wjLUHuwW_cPx{oaUMR?qFi}
z6S4jKO;3gw2R8@*t4W{~!e~)+^fF@6GGys*`N2k6r5y>_(xTd@aF(ib=W<chzrl5-
ze^gfUWWrOcun`BeV$<c<PeCWYVK|lTMu;N;HylCl0PXQOSNpG#w>5HhgE{BBhui4K
z<%%h2>pbH+>GO$>A7_N++iErwy88S>!ISLAhEJR97x2qpTJRlHs$Q=NgRm8+3ylF1
z5Yw0IwEL)IxSG!`m)&?#yHXI2|2CJ}j+3vC`RW(SJiW+J<6l%(-GgVPqirFof3uv>
zw(4qb>UI=z0{_VCR3`xs;!I=ZQ*LV)J)!sHszs**$1I=J(YI2zyEeg%M0bn47`J5h
zAIyVYdK<?3v9Xrhhxe6k=nYz;-0^jKlacE+F(8#qPaW5jhPI!}9w<B3hgnRirA4?M
z?V2{mbmi*>!q2Q{x~h5~^C6E-Ny3nFd;z>Jm!M2aX4vSt?zv6E%VWs}KxK+)Y*ZaC
zApvK{7>EJH;`8g)Kr3(6bIjN#>N2+{;f=_L#d;gerNbtQeIRfiO&D_kYV?EU0c4Q1
zU0<qQ4=<ZHIYN~x7DOq_YyF@2T9l`Nq)OblROR6)JXy!9hkn?YPv<jaP5;KY;lOPG
zZet90C3{4~>oSbWtViw5&<QMPEW?r$AHK{WB|FDv={H#j=tLYoa?yR6(O8KR2mkGb
zT>b4G%HW5#*KAO;SX-kISwJd;%`F09N94g_xK!{p$cluw)3vf=+1(?43trT-v%6@h
zjjQRE>o<zBdxb2QJum55ZS)z=H=>Xz9aOY&;kSb(x=y8Y5%!<}rTNuZz%m=mGNI^F
zc_3#xWpDD;v_Iv{dQ2m6=-$buU~X-W*`dD7N4M`SE8&bajmHzJgZXX6@fLk;-ck#U
zPO~lf>H9eo;#wftL~Xo5w_FUPCON50@9_d(<I)d<`vjFrE*&$s)89mCEGl!`?6s=Y
z2}xNQwNpZ#hp5=ypT4R<83idE(E)dl^8(`o2n#k&K!IFDpTltDf?BAY0LAd3lhWg1
zk3_v7KKcV;J3w~ZKKZ=vdAqx-TQ{y0lRt%5hLS!ry-~Gzz}x>Ln?KM$2nKq22T=eS
zDE?i$es-?LPxz|?C6c*-Mga7jC0(er*OvgjT6sVqP^*z;xTwlKT3w25^jd{buF;0O
z*Y)R8l+la(d3gB_$5BURR`6j$ll_<RT`}`5Pwu*#W_bA58URbyxW{VVVqP`?cm-f>
z82)0ANa-im`H0WmPzRH^@ip&D=Lqi?Bzx{AGu-R=|1AY@LO_%E7bcobs1^Kqq_w$x
zDU1{@n<fW9vTXp!^9Oj$%!`W^Q^6J^q}D@`KR>;>+@*BlObo3veke_7HWc4IbFlOz
zIQh5kn_^Uwo3SsengRE1VCzwBXz2i^EU1WBTDDC_Av9>T7kecSCjCmC_r~thv4YM%
z0P$^``GLsNCq?W;25_%70H)f(*dxGXclEreDW{0%W|JX?M@~38_bJJhOKzk^sj9is
z{nwT)yd)gD8(+xh=SFSREzaB@)JS9QbXJn%uK102k%ZoD3Fq;NJIp9HSm^{q8Gy+D
zvKN7}a%0Q4>mF=)`OFBfdjx&jiur4@mRzs#M2zZT)4bjeBKp0ggU4~=2)CW&1K_pS
zvDwpI;4onR8jfh2*fD;)l2vaS-6O*-v-w5v&BGwa-TwN7E|o|?zyt$uEJo@^M5z5?
ztN)SmtaX7h$XR}NUD&bA$DC_+-1LJ7*YwBZsIf|s)g+Mb*=mPSO!Rz6yCHi^6PRRD
znf1x*KNgI%>V@u5udyFBCju(NZaVu>U%!v(n?Z>Bf^m0<?Q|=)yORFD`OEuyW_H=X
z2V7T!vs7N!I|2*JB+vWG_sKV!emoN=Y>lBCvT(<Ib_7S<GSUj(VTMq;{as!`UZ>l2
z&hs|Go6l<<wx%6UFC>T8+t~L>H!W7@Nm+3v?!4{R30*_cCf)!ACnc<(hwxVx0%`rj
zRBF?*Bb}=`Z*ArjK)uJSzZPyPs#gn8KafjYRr&RS&-)ypv~nd4P^n6d6O6`12ra5C
zH)8;;X~axu@yV`oA+=^h0*L53YtzXK-OK5bv_+0%qUY3=6gFnHwDI{56=Mu(hh%Gm
z@}}MuoW~MCi4sT)WlMZk@Md_{gQln>;`++*dChCE!io`mGwf2U{}ai(TtoaJ>lV0Y
z@bKDx%<t;2YX2<wJls~q2aqb#QvqNKHl#pD%Eb`bGgpe<Ow|4;2x;b@y?lxiwySb6
z%!o8_A17!$Lt`jCeMy<|e)4p&Xs*?nM^9K){v?Xe6~2#~JB;|lkhikZ)+r5l$zw;e
zoV`oT>CX8D59A5WznVXu!+pEb>s!@T)qy%Ts*Xv&Nqr|e5N*cpah)r}WYCTTlt=0?
zDhc*jhwb6#gv)VTrkE(wa+Rm%xSrd;8W>5ZQHX~MFb(5Cn(34lOo@+-kNp-lYS6<}
zKG8`{qBF>REtQUei}!-|)ss%^3i#BZd86Gu%A$WydYjBYkyaMNqzKF3*--6jIuh=T
z6FI4dQ68DBWJKtmwKMxrMPx}7vt_5=_sgwCh4Qf&GNix#eZn#){#U}8xI?+Oar_yi
z31bP_8I(12>|2^KaRynk)3GL#$R0zMv5qW*k~Oj?gk!R0H<4^3okB6Taga5Qbgb_)
zy??+w*EQEObN}w&eSf~6pAm{|(%=@vtr(zYR+&tq!2n=<`c(GWF{u(g%MW@hq0;k-
z#JMm^#{GA0<pA|@F$|wnVHWxeKbn~cMpAg+G<CRC#zpaH6dq?6JY;{Cu$u{ZFn&Fr
z3ms$#hBlfHcg4}U8Z=60sDE~HusVI7`L)<y{%NY5E#T32l4Rf3As5l7c$89YMaci2
zAMe`=*)(apCo;Gy>plJoildEMa(mu~^Hv{{#5PE%P6MAuw4jYYO7FCCZJGx?pEJ51
zERo80H=Bf6G-91|+hIIZluy6Dp=D1u1(fkE@%y3=>COFL6YPJc;Ih#j{~?NIyPSU9
z`h|;}UIUR&T}yMwMEjw&hiOWHl{WL|e4lqG#48>>S3xQ+Bi#`;5afrkk7QP@uyf2q
zr_k~ud|5TBQ2u*6PeOeg4;rsvdX~nhAhb-q3d2%1$F9ar*DG3@Wv+zwgE*pgcD`v;
z#xSL~3Zm2y^bN%R;#a=9-4U(W&h$;TLAV{1Mqcu@e)q9!@}kdchH5{{@w#<QT{6MR
z*0}`Lu6Jkn6AJrr`eM-ltR{8Iz~{Y|`X9Vf?A9cZ^WC*nCP1`07XOjeXi+~!Rlh`R
z%&T_Zo%H`G#~8HfyX$Md5y)(OEl3AMU>9$m>gcu*R`PonG5Yy0y>35sxEnJ79V%Vm
zW3+fDAoF;%-8_>{L#$W}%sfywNy~J<r)%tSA-W${s|)rcsGlIvHqD495#BWIilwbs
z8s%QRR-O}Xlcc6OkXAb)#R5iS4HPi*#g6a!9=VW>?waAokQq(=a=GII+u<`KL+o=-
zc(NoLZj<!$y71ZzMoxBp3%_C>c1bj+ky{3>!2UL*=R-<3RHHdCARq^QxPAJ#y$LRi
zYtr&pCV-?*a>Vn6Fsu0-KVoZlR>f=$TE2({(|WkN)}Pi3t2^4cGaPk`B*}H5xW{KI
zOrL_nHQ1>B9d7avQ_hpFlfQN$I6TJ6|49vFb3vBKg6o-ox!~}YhUO<oA@)o<Cq>TO
zZL0$<D`;uLvio^G*IN?-#G0Dd7uP*`p7=ACFf?9NU(1dV?eKg;!TMTTS~>Xb9`d{_
zPpI%DjtgS2pZ=_HETpG(sd|-AfgNbb(Z)NMmG}E+i@5hx%ieu}zdBQI#2+u@GHXJ%
z;!7O5bjYdu<=Ll3I}S>e<agaFVr8Itd4?3GV-c$he0zTUQ&=;_hY}>{Rt^C-5W|!0
zi#m7V^<R3LpvM_{Uu?wV41Te4Fo;Er2Xf}AVk93Ww<qEjlaf~DspOa9Agy=OO15#i
zZ!8=)6~ppD$W2ZZ+C>mi^VYGZSO<agT&5frtuQ?>8L^>VdXGoRWT@|k$QK&25sbi(
z7q~-2*}51tl`lY2i_Z}97FbMj$r3)r(y=+V1`erb<6Z36x|RC5JlLG7*{(%#Ay-`O
zYu?>IETdAI=wm<RutJ|U-CGmSMoXPaL#{{Hy+xJ6X4dyI)_1^&DIW&6dHtUX?_Df$
z)S?JB-eSwRm!;7TjxxlZifcnv>4~|JH&aPx4R5uE|H>qPIW|i)XOjZ2MG`snvq-dK
zOv<B|9uHP;D*JoDy=cpb5znUn?B6H1O|kGYb@`N~-EC+5u1@^4uY<be?G>bCDK}SX
z+q}JXtgbWIpJtFP%l`d?fiE_&V)1GD<XRdL#=(KT{wn=&aQMR#rcT<sMNAr8v3MWJ
zm`j|a1m~vazP9w0bFH3*?Vocs8Iqp`&wwPJnBB`EOXC&)E@LwgwpjI5qpqzh#?E?$
z?YcJ<jdFLkuh#WFjcl{;UW$)k&L2H0XcEwuE2Byb)*3uFVl$lAKSTK|!D$q3K7g9L
zW$Qg<qIb~eIe;2akS3l?E4Jj_CZd|X?Yy>~_C?weIzNQ7;+jsA`pYBhjdls{;MK$5
z6uC9FkYAqg<^Vz#SA*9GOP8upWU&pnrZINnm72*T%mlb)m7wJ!z(uWTln61k$jV8H
zoSRdxgV1jl$;tWKVGT7<@-c@RT8UAt9Bh9j@Q&=9c`9-{`fdMd)F$B=vpm-gW}ZPv
z<%05J{ZlHqnnO=UeKcyXTcVoY-Y9$k2Ce4v0dHZ}e0)zrt%75lF@Fr66#$A{8^M_Y
zKNn>BUv#F!Y8;*o0H~LiA8BWW#QTVLNR<d3d}jbuM^JGFM*?2JbijaoQ;7!Us%``T
zqy^yBA9<zl;5HOHjeLy#de*T}2q3sn4XTKsTO3-uBK3Kcq?PYi7ywOaTR$G%`GX9S
zO>=UzKsaiPggOVzXO)4QGN1*|Q)ZbRQePU*3*fGmr!99L&EbYo#@6B(@ZoqKpvT~W
z8d3ANtixWXoK`q`LQCvS!Gr3F&yq+Vh7yv%UucCuuoSMP6~yBCfMVskbp>~mR?Twl
zHvax<8na#;o*yVaZ<hT>Q$53eqP0A|43}x_Uc=@>02V*Th9R(abJxKF8hedbWA-}$
zz@V#J&4e`m8dx-ACb~Es+*fAj&;k(RNA$G@UI#UkT(qKK<VQ2bPC)={G%GTMQ)l0h
z+?^I;_(B4}NrE|%WV^@Ccp;SFE#C_TOZHqq4`Igr&?Hzhn$^pO?of&(KjilWfQIi|
zRFdLWmtm`7{IchpnP<*=yO2}};Cej!e$j*OJDP9ir2VR$yx8@p7(phN3FtAt*w8iS
zZwDRHU+Y(uB3%Z6Gf2M+lf>pSe;epfg8in|!TiNOT>uE9sz*kDJ=?Dcmm&9lrQ~h-
zQvhxV*cnKUNr|z}aL4Y}>#x0H@awYx00;k^r-8xrkpE@w*jl))R-$jx6nhW^&^6#E
zFd#G1JUhcvsBxj40PgiCrGu@{Af;Q&73)*=8&GefXk8HjR86Xg_#O2b&e#o^1BHF=
z@XK&PW+t2`+U=oku*?z^$<9InZ@e$;i2C);0Cqs4E*Oj#lJ?+e$b`_P&;!>kI;bf$
zA=~+W+p1NVN!BzNmC$?nL9d}a&<g$PfdONppFHtx$c)%!5UG7XwozeI850I6Ru*kY
zdt7mO)3|RGjy4EXK4>l94vd0IG9q}l?`xEm@-V$Tj;uGp=7<#2mtXeoQvwmKyi5UQ
zAm15Tj}Y6k2c<H}3oZw8RZ2q|`kXIHw;wrIa2zOAEwka`YK$D-X43gs|4Yyb+!U#(
zYno+&6?fc<%JTu+?|FUB^35I71aSsek|HA5sw~Apj$<+go}{3YbNv^C>+#aHU?qcM
z;s-KJkr8PTvha{K@f@PJ@AG>Jo7frzXI9y>8>KNnw+pjQ*jc1l5WaKM6L&n~`pHau
zG2n}v03}8*MkBn8wE5+L=?A9*iHS_0`|1CBC58T~wr4odm1OAXZCb)1-^r4LgAX#Z
z$ZU9U<qM1~GUqCe%h68el<YF-iX2@?EWCa2{VZ9fvsoqlKZZ0_2~Iohyov$rfjBhq
zuU`|Uc4Ja*OpYuJW=0bQ6*tE~APxIP9BP@GYPiiu^Xx4cWv;q8i+5mrx=(~*4*8#T
z9J%y<gdsCZ4K%V_D<`ppm@r1Q(R*IwgtCIN5o|K}*^<=(`2+SFbwhC~-H5*vF29BO
z+~)CY;$#YtwA~zXecbgzDpc5zgQw?a$jsT%vvBC5GyVVY=7$!r5*1UZWxg+*`T+E?
zEXc;g(NE|<6vx0_jRVC^9(~9Zjvw<x)6kELQqgitTsHs|aFNGw<`S0?CtPDgDvltu
z7z_HYWcb|sHCA=z#s9g^VIeAkMl>hLk1YDW5wE_M4?}P=@mkPd@2-F=Q8RDMeUVcc
z7bv-Tqm`OIY5_j6`7wwA-fP|-m$Q$n`o5(v&OYj&e%`P<0;ZmO{H=5gl$K>MQhjLh
z_pUs0`AASwsgiw;)C?ezXiImN)*1tT>^h(L&HLivP|IApAIQBhV=A$h=8JCObgiC`
z3LiA{tUo^`f9AKZ>|Vh+@LZjC<@z=r8XdWos>z=wz(YE7knbuhZ-I2-{pUr$m2>|r
z3zGBgbC#!ILDL`YQiCnJWpN4ud|a{Wdh#Y3SO5Mo#Y`M$5PA+O$6o76R&FPHl@OT6
zE|i?TBM3{5%qoD6=w|j2wk#??hHhL1Lzdz~b~8@kSG5=`)v4G6XPkwm6Dz@qpHuFC
zD^a1^tZj>0sR`D$P|0M%`Zxnm@LCs<Uge2)po4C(GEj}B!Yl5FBXi0xn1aewdbZFr
z<D43e2@7q*wydZTgF6ON)S&T)vPiG{TjgEhPsRy0q52J=#SNL9ozk{<%cpt6<NVz1
z_Ubjlz09rJlbEsde@-~PQCU;oNTxY`E|?H{fqx+unOu5}&-^qxkbQVY)~nm_<iW;l
zu(e=qcGD5&!?LrRljB1JFP6jYp{E5SmN~Ro$vyl3Oh2DVZgPLi8wdZocDgAWCRjd1
S&<90<fRTaO^*Vjm*#7~|Hx$AE

literal 0
HcmV?d00001

diff --git a/charts/incubator/docspell/questions.yaml b/charts/incubator/docspell/questions.yaml
new file mode 100644
index 00000000000..b00927438f3
--- /dev/null
+++ b/charts/incubator/docspell/questions.yaml
@@ -0,0 +1,724 @@
+# Include{groups}
+portals:
+  open:
+# Include{portalLink}
+questions:
+# Include{global}
+# Include{controller}
+# Include{controllerDeployment}
+# Include{replicas}
+# Include{replica1}
+# Include{strategy}
+# Include{recreate}
+# Include{controllerExpert}
+# Include{controllerExpertExtraArgs}
+  - variable: dsc
+    group: Container Configuration
+    label: DSC Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: enabled
+          label: Enable DSC (Document Importer)
+          description: You need to enable integration endpoint with HTTP header as well in Rest Server configuration
+          schema:
+            type: boolean
+            default: false
+            show_subquestions_if: true
+            subquestions:
+              - variable: imported_action
+                label: Action to perform on imported documents
+                schema:
+                  type: string
+                  default: move
+                  enum:
+                    - value: move
+                      description: move
+                    - value: delete
+                      description: delete
+              - variable: not_match_glob
+                label: Not match glob pattern
+                schema:
+                  type: string
+                  default: "**/.*"
+              - variable: match_glob
+                label: Match glob pattern
+                schema:
+                  type: string
+                  default: ""
+              - variable: language
+                label: Language
+                schema:
+                  type: string
+                  default: ""
+              - variable: tag
+                label: Tag
+                schema:
+                  type: string
+                  default: ""
+  - variable: rest_server
+    group: Container Configuration
+    label: Rest Server Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: app_name
+          label: App Name
+          description: App name, shows on the top right corner
+          schema:
+            type: string
+            default: Docspell
+        - variable: base_url
+          label: Base URL
+          description: This is the base URL this application is deployed to.
+          schema:
+            type: string
+            default: ""
+        - variable: server_opts
+          label: Server Options
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: enable_http2
+                label: Enable HTTP2
+                schema:
+                  type: boolean
+                  default: false
+              - variable: max_connections
+                label: Max Connections
+                schema:
+                  type: int
+                  default: 1024
+              - variable: response_timeout
+                label: Response Timeout
+                schema:
+                  type: string
+                  default: 45s
+        - variable: max_item_page_size
+          label: Max Item Page Size
+          description: This is a hard limit to restrict the size of a batch that is returned when searching for items.
+          schema:
+            type: int
+            default: 200
+        - variable: max_note_length
+          label: Max Note Length
+          description: The number of characters to return for each item notes when searching.
+          schema:
+            type: int
+            default: 180
+        - variable: show_classification_settings
+          label: Show Classification Settings
+          description: This defines whether the classification form in the collective settings is displayed or not.
+          schema:
+            type: boolean
+            default: true
+        - variable: auth
+          label: Auth
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: session_valid
+                label: Session Valid
+                description: How long a authentication token is valid
+                schema:
+                  type: string
+                  default: 5 minutes
+              - variable: remember_me
+                label: Remember Me
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable Remember Me
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: valid
+                      label: Valid
+                      description: How long the remember me cookie/token is valid.
+                      schema:
+                        type: string
+                        default: 30 days
+        - variable: download_all
+          label: Download
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: max_files
+                label: Max Files
+                description: How many files to allow in a zip
+                schema:
+                  type: int
+                  default: 500
+              - variable: max_size
+                label: Max Size
+                description: The maximum (uncompressed) size of the zip file contents.
+                schema:
+                  type: string
+                  default: 1400M
+        - variable: integration_endpoint
+          label: Integration Endpoint
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: enabled
+                label: Enable Integration Endpoint
+                schema:
+                  type: boolean
+                  default: false
+              - variable: priority
+                label: Priority
+                description: The priority to use when submitting files through this endpoint.
+                schema:
+                  type: string
+                  default: low
+                  enum:
+                    - value: low
+                      description: low
+                    - value: high
+                      description: high
+              - variable: source_name
+                label: Source Name
+                description: The name used for the item "source" property when uploaded through this endpoint.
+                schema:
+                  type: string
+                  default: integration
+              - variable: allowed_ips
+                label: Allowed IPS
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable Allowed IPs
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: ips
+                      label: IPs
+                      schema:
+                        type: list
+                        # TODO: Check how it's rendered on GUI
+                        default: ["127.0.0.1"]
+                        items:
+                          - variable: ipEntry
+                            label: IP Entry
+                            schema:
+                              type: string
+                              required: true
+                              default: ""
+              - variable: http_basic_auth
+                label: HTTP Basic Auth
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable HTTP Basic Auth
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: realm
+                      label: Realm
+                      schema:
+                        type: string
+                        default: ""
+                    - variable: user
+                      label: User
+                      schema:
+                        type: string
+                        default: ""
+                    - variable: password
+                      label: Password
+                      schema:
+                        type: string
+                        private: true
+                        default: ""
+              - variable: http_header
+                label: HTTP Header
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable HTTP Header
+                      schema:
+                        type: boolean
+                        default: false
+                    - variable: header_name
+                      label: Header Name
+                      schema:
+                        type: string
+                        default: Docspell-Integration
+                    - variable: header_value
+                      label: Header Value
+                      schema:
+                        type: string
+                        private: true
+                        default: some-secret
+        - variable: admin_endpoint
+          label: Admin Endpoint
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: secret
+                label: Secret
+                description: Disables endpoint if empty
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+        - variable: backend
+          label: Backend
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: mail_debug
+                label: Mail Debug
+                description: Enable or disable debugging for e-mail related functionality
+                schema:
+                  type: boolean
+                  default: false
+              - variable: database_schema
+                label: Database Schema
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: run_main_migrations
+                      label: Run Main Migrations
+                      description: Whether to run main database migrations.
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: run_fixup_migrations
+                      label: Run Fixup Migrations
+                      description: Whether to run fixup database migrations.
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: repair_schema
+                      label: Repair Schema
+                      description: Use with care. This repairs all migrations in the database by updating their checksums and removing failed migrations.
+                      schema:
+                        type: boolean
+                        default: false
+              - variable: signup
+                label: Signup
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: mode
+                      label: Mode
+                      description: The mode defines if new users can signup or not.
+                      schema:
+                        type: string
+                        default: open
+                        enum:
+                          - value: open
+                            description: open
+                          - value: invite
+                            description: invite
+                          - value: closed
+                            description: closed
+                    - variable: invite_time
+                      label: Invite Time
+                      description: This is the period an invitation token is considered valid.
+                      schema:
+                        type: string
+                        default: 3 days
+  - variable: joex
+    group: Container Configuration
+    label: Job Executor Configuration
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: database_schema
+          label: Database Schema
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: run_main_migrations
+                label: Run Main Migrations
+                description: Whether to run main database migrations.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: run_fixup_migrations
+                label: Run Fixup Migrations
+                description: Whether to run fixup database migrations.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: repair_schema
+                label: Repair Schema
+                description: Use with care. This repairs all migrations in the database by updating their checksums and removing failed migrations.
+                schema:
+                  type: boolean
+                  default: false
+        - variable: mail_debug
+          label: Mail Debug
+          description: Enable or disable debugging for e-mail related functionality. This applies to both sending and receiving mails.
+          schema:
+            type: boolean
+            default: false
+        - variable: send_mail
+          label: Send Mail
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: list_id
+                label: List ID
+                description: Enable or disable debugging for e-mail related functionality. This applies to both sending and receiving mails.
+                schema:
+                  type: string
+                  default: ""
+        - variable: scheduler
+          label: Scheduler
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: pool_size
+                label: Pool Size
+                description: Number of processing allowed in parallel.
+                schema:
+                  type: int
+                  default: 1
+              - variable: counting_scheme
+                label: Counting Scheme
+                description: A counting scheme determines the ratio of how high and low priority jobs are run.
+                schema:
+                  type: string
+                  default: 4,1
+              - variable: retries
+                label: Retries
+                description: How many times a failed job should be retried until it enters failed state.
+                schema:
+                  type: int
+                  default: 2
+              - variable: retry_delay
+                label: Retry Delay
+                description: The delay until the next try is performed for a failed job.
+                schema:
+                  type: string
+                  default: 1 minute
+              - variable: log_buffer_size
+                label: Log Buffer Size
+                description: The queue size of log statements from a job.
+                schema:
+                  type: int
+                  default: 500
+              - variable: wakeup_period
+                label: Wakeup Period
+                description: If no job is left in the queue, the scheduler will wait until a notify is requested.
+                schema:
+                  type: string
+                  default: 30 minutes
+        - variable: periodic_scheduler
+          label: Periodic Scheduler
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: wakeup_period
+                label: Wakeup Period
+                description: A fallback to start looking for due periodic tasks regularly.
+                schema:
+                  type: string
+                  default: 10 minutes
+        - variable: user_tasks
+          label: User Tasks
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: scan_mailbox
+                label: Scan Mailbox
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: max_folders
+                      label: Max Folders
+                      description: A limit of how many folders to scan through.
+                      schema:
+                        type: int
+                        default: 50
+                    - variable: mail_chunk_size
+                      label: Mail Chunk Size
+                      description: How many mails (headers only) to retrieve in one chunk.
+                      schema:
+                        type: int
+                        default: 50
+                    - variable: max_mails
+                      label: Max Mails
+                      description: A limit on how many mails to process in one job run.
+                      schema:
+                        type: int
+                        default: 500
+        - variable: house_keeping
+          label: House Keeping
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: schedule
+                label: Schedule
+                description: When the house keeping tasks execute.
+                schema:
+                  type: string
+                  default: Sun *-*-* 00:00:00 UTC
+              - variable: cleanup_invites
+                label: Cleanup Invites
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable Invite Cleanup
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: older_than
+                      label: Older Than
+                      description: The minimum age of invites to be deleted.
+                      schema:
+                        type: string
+                        default: 30 days
+              - variable: cleanup_remember_me
+                label: Cleanup Remember Me
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable Remember Me Cleanup
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: older_than
+                      label: Older Than
+                      description: The minimum age of tokens to be deleted.
+                      schema:
+                        type: string
+                        default: 30 days
+              - variable: cleanup_jobs
+                label: Cleanup Jobs
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable Jobs Cleanup
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: older_than
+                      label: Older Than
+                      description: The minimum age of jobs to delete.
+                      schema:
+                        type: string
+                        default: 30 days
+                    - variable: delete_batch
+                      label: Delete Batch
+                      description: This defines how many jobs are deleted in one transaction.
+                      schema:
+                        type: int
+                        default: 100
+              - variable: cleanup_downloads
+                label: Cleanup Downloads
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable Downloads Cleanup
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: older_than
+                      label: Older Than
+                      description: The minimum age of a download file to be deleted.
+                      schema:
+                        type: string
+                        default: 14 days
+              - variable: check_nodes
+                label: Check Nodes
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable Check Nodes
+                      schema:
+                        type: boolean
+                        default: true
+                    - variable: min_not_found
+                      label: Min Not Found
+                      description: How often the node must be unreachable, before it is removed.
+                      schema:
+                        type: int
+                        default: 2
+              - variable: integrity_check
+                label: Integrity Check
+                schema:
+                  additional_attrs: true
+                  type: dict
+                  attrs:
+                    - variable: enabled
+                      label: Enable Integrity Check
+                      schema:
+                        type: boolean
+                        default: true
+# Include{containerConfig}
+# Include{serviceRoot}
+        - variable: main
+          label: Main Service
+          description: The Primary service on which the healthcheck runs, often the webUI
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
+                    - variable: main
+                      label: Main Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 10320
+                              required: true
+# Include{advancedPortHTTP}
+                                - variable: targetPort
+                                  label: Target Port
+                                  description: The internal(!) port on the container the Application runs on
+                                  schema:
+                                    type: int
+                                    default: 10320
+        - variable: joex
+          label: Joex Service
+          description: Joex Service
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorClusterIP}
+# Include{serviceSelectorExtras}
+                    - variable: joex
+                      label: Joex Service Port Configuration
+                      schema:
+                        additional_attrs: true
+                        type: dict
+                        attrs:
+                          - variable: port
+                            label: Port
+                            description: This port exposes the container port on the service
+                            schema:
+                              type: int
+                              default: 10321
+                              required: true
+# Include{advancedPortHTTP}
+                                - variable: targetPort
+                                  label: Target Port
+                                  description: The internal(!) port on the container the Application runs on
+                                  schema:
+                                    type: int
+                                    default: 10321
+# Include{serviceExpertRoot}
+            default: false
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceAdvanced}
+        - variable: import
+          label: Import Storage
+          description: Mounted to DSC container at /import
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceAdvanced}
+# Include{persistenceList}
+# Include{ingressRoot}
+        - variable: main
+          label: Main Ingress
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{ingressDefault}
+# Include{ingressTLS}
+# Include{ingressTraefik}
+# Include{ingressExpert}
+# Include{ingressList}
+# Include{security}
+# Include{securityContextAdvancedRoot}
+              - variable: privileged
+                label: Privileged mode
+                schema:
+                  type: boolean
+                  default: false
+              - variable: readOnlyRootFilesystem
+                label: ReadOnly Root Filesystem
+                schema:
+                  type: boolean
+                  default: false
+              - variable: allowPrivilegeEscalation
+                label: Allow Privilege Escalation
+                schema:
+                  type: boolean
+                  default: false
+              - variable: runAsNonRoot
+                label: runAsNonRoot
+                schema:
+                  type: boolean
+                  default: false
+# Include{securityContextAdvanced}
+# Include{podSecurityContextRoot}
+        - variable: runAsUser
+          label: runAsUser
+          description: The UserID of the user running the application
+          schema:
+            type: int
+            default: 0
+        - variable: runAsGroup
+          label: runAsGroup
+          description: The groupID this App of the user running the application
+          schema:
+            type: int
+            default: 0
+        - variable: fsGroup
+          label: fsGroup
+          description: The group that should own ALL storage.
+          schema:
+            type: int
+            default: 568
+# Include{podSecurityContextAdvanced}
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{promtail}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}
diff --git a/charts/incubator/docspell/templates/_dsc.tpl b/charts/incubator/docspell/templates/_dsc.tpl
new file mode 100644
index 00000000000..8fbfe5080f8
--- /dev/null
+++ b/charts/incubator/docspell/templates/_dsc.tpl
@@ -0,0 +1,41 @@
+{{/* Define the dsc container */}}
+{{- define "docspell.dsc" -}}
+image: {{ .Values.dscImage.repository }}:{{ .Values.dscImage.tag }}
+imagePullPolicy: {{ .Values.dscImage.pullPolicy }}
+securityContext:
+  runAsUser: {{ .Values.podSecurityContext.runAsUser }}
+  runAsGroup: {{ .Values.podSecurityContext.runAsGroup }}
+  readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
+  runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
+volumeMounts:
+  - name: import
+    mountPath: /import
+command:
+  - dsc
+  - {{ printf "%v:%v" "http://localhost" .Values.service.main.ports.main.port | quote }}
+  - watch
+  - --recursive
+  - --integration
+  - --header
+  - {{ printf "%v:%v" .Values.rest_server.integration_endpoint.http_header.header_name .Values.rest_server.integration_endpoint.http_header.header_value | quote }}
+  {{- if .Values.dsc.language }}
+  - --language {{ .Values.dsc.language }}
+  {{- end }}
+  {{- if .Values.dsc.tag }}
+  - --tag {{ .Values.dsc.tag }}
+  {{- end }}
+  {{- if .Values.dsc.not_match_glob }}
+  - --not-matches
+  - {{ .Values.dsc.not_match_glob | quote }}
+  {{- end }}
+  {{- if .Values.dsc.match_glob }}
+  - --matches
+  - {{ .Values.dsc.match_glob | quote }}
+  {{- end }}
+  {{- if eq .Values.dsc.imported_action "delete" }}
+  - --delete
+  {{- else if eq .Values.dsc.imported_action "move" }}
+  - --move {{ .Values.persistence.import.mountPath }}/imported
+  {{- end }}
+  - {{ .Values.persistence.import.mountPath }}/docs
+{{- end -}}
diff --git a/charts/incubator/docspell/templates/_joex.tpl b/charts/incubator/docspell/templates/_joex.tpl
new file mode 100644
index 00000000000..38ed233edad
--- /dev/null
+++ b/charts/incubator/docspell/templates/_joex.tpl
@@ -0,0 +1,46 @@
+{{/* Define the joex container */}}
+{{- define "docspell.joex" -}}
+image: {{ .Values.joexImage.repository }}:{{ .Values.joexImage.tag }}
+imagePullPolicy: {{ .Values.joexImage.pullPolicy }}
+securityContext:
+  runAsUser: {{ .Values.podSecurityContext.runAsUser }}
+  runAsGroup: {{ .Values.podSecurityContext.runAsGroup }}
+  readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
+  runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
+args:
+  - /opt/joex.conf
+volumeMounts:
+  - name: joex
+    mountPath: /opt/joex.conf
+    subPath: joex.conf
+    readOnly: true
+ports:
+  - containerPort: {{ .Values.service.joex.ports.joex.port }}
+    name: joex
+{{/* TODO: Find out a path for healthchecks and come back to enable probes
+readinessProbe:
+  httpGet:
+    path: /
+    port: {{ .Values.service.joex.ports.joex.port }}
+  initialDelaySeconds: {{ .Values.probes.readiness.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.readiness.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.readiness.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.readiness.spec.failureThreshold }}
+livenessProbe:
+  httpGet:
+    path: /
+    port: {{ .Values.service.joex.ports.joex.port }}
+  initialDelaySeconds: {{ .Values.probes.liveness.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.liveness.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.liveness.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.liveness.spec.failureThreshold }}
+startupProbe:
+  httpGet:
+    path: /
+    port: {{ .Values.service.joex.ports.joex.port }}
+  initialDelaySeconds: {{ .Values.probes.startup.spec.initialDelaySeconds }}
+  timeoutSeconds: {{ .Values.probes.startup.spec.timeoutSeconds }}
+  periodSeconds: {{ .Values.probes.startup.spec.periodSeconds }}
+  failureThreshold: {{ .Values.probes.startup.spec.failureThreshold }}
+*/}}
+{{- end -}}
diff --git a/charts/incubator/docspell/templates/_secret.tpl b/charts/incubator/docspell/templates/_secret.tpl
new file mode 100644
index 00000000000..14be9d97e85
--- /dev/null
+++ b/charts/incubator/docspell/templates/_secret.tpl
@@ -0,0 +1,616 @@
+{{/* Define the secret */}}
+{{- define "docspell.secret" -}}
+
+{{- $serverSecretName := printf "%s-server-secret" (include "tc.common.names.fullname" .) }}
+{{- $joexSecretName := printf "%s-joex-secret" (include "tc.common.names.fullname" .) }}
+{{- $storeSecretName := printf "%s-store-secret" (include "tc.common.names.fullname" .) }}
+
+{{- $server := .Values.rest_server -}}
+{{- $serverID := printf "server-%v" (randAlphaNum 10) -}}
+
+{{- $joex := .Values.joex -}}
+{{- $joexID := printf "joex-%v" (randAlphaNum 10) -}}
+
+{{- $server_secret := "" }}
+{{- with (lookup "v1" "Secret" .Release.Namespace $storeSecretName) }}
+{{- $server_secret = (index .data "server_secret") }}
+{{- else }}
+{{- $server_secret = printf "b64:%v" (randAlphaNum 32 | b64enc) }}
+{{- end }}
+
+{{- $new_invite_password := "" }}
+{{- with (lookup "v1" "Secret" .Release.Namespace $storeSecretName) }}
+{{- $new_invite_password = (index .data "new_invite_password") }}
+{{- else }}
+{{- $new_invite_password = randAlphaNum 32 | b64enc }}
+{{- end }}
+
+---
+
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $storeSecretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+stringData:
+  server_secret: {{ $server_secret }}
+  new_invite_password: {{ $new_invite_password }}
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $serverSecretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+stringData:
+  server.conf: |
+    docspell.server {
+      app-name = {{ $server.app_name | quote }}
+      app-id = {{ $serverID | quote }}
+      base-url = {{ $server.base_url | default (printf "%v:%v" "http://localhost" .Values.service.main.ports.main.port) | quote }}
+      internal-url = {{ printf "%v:%v" "http://localhost" .Values.service.main.ports.main.port | quote }}
+      {{- $logging := $server.logging }}
+      logging {
+        format = {{ $logging.format | quote }}
+        minimum-level = {{ $logging.minimum_level | quote }}
+        levels = {
+          "docspell" = {{ $logging.levels.docspell | quote }}
+          "org.flywaydb" = {{ $logging.levels.flywaydb | quote }}
+          "binny" = {{ $logging.levels.binny | quote }}
+          "org.http4s" = {{ $logging.levels.http4s | quote }}
+        }
+      }
+      bind {
+        address = "0.0.0.0"
+        port = {{ .Values.service.main.ports.main.port }}
+      }
+      {{- $server_opts := $server.server_opts }}
+      server-options {
+        enable-http-2 = {{ $server_opts.enable_http2 }}
+        max-connections = {{ $server_opts.max_connections }}
+        response-timeout = {{ $server_opts.response_timeout }}
+      }
+      max-item-page-size = {{ $server.max_item_page_size }}
+      max-note-length = {{ $server.max_note_length }}
+      show-classification-settings = {{ $server.show_classification_settings }}
+      {{- $auth := $server.auth }}
+      auth {
+        server-secret = {{ $server_secret | quote }}
+        session-valid = {{ $auth.session_valid | quote }}
+        remember-me {
+          enabled = {{ $auth.remember_me.enabled }}
+          valid = {{ $auth.remember_me.valid | quote }}
+        }
+      }
+      {{- $download_all := $server.download_all }}
+      download-all {
+        max-files = {{ $download_all.max_files }}
+        max-size = {{ $download_all.max_size }}
+      }
+      {{- $openid := $server.openid }}
+      openid =
+        [
+          {{- range initial $openid }}
+          {
+            enabled = {{ .enabled }},
+            display = {{ .display | quote }}
+            provider = {
+              provider-id = {{ .provider.provider_id | quote }},
+              client-id = {{ .provider.client_id | quote }},
+              client-secret = {{ .provider.client_secret | quote }},
+              scope = {{ .provider.scope | quote }},
+              authorize-url = {{ .provider.authorize_url | quote }},
+              token-url = {{ .provider.token_url | quote }},
+              {{- with .provider.user_url }}
+              user-url = {{ . | quote }},
+              {{- end }}
+              {{- with .provider.logout_url }}
+              logout-url = {{ . | quote }},
+              {{- end }}
+              sign-key = {{ .provider.sign_key | quote }},
+              sig-algo = {{ .provider.sig_algo | quote }}
+            },
+            collective-key = {{ .collective_key | quote }},
+            user-key = {{ .user_key | quote }}
+          },
+          {{- end }}
+          {{- with last $openid }}
+          {
+            enabled = {{ .enabled }},
+            display = {{ .display | quote }}
+            provider = {
+              provider-id = {{ .provider.provider_id | quote }},
+              client-id = {{ .provider.client_id | quote }},
+              client-secret = {{ .provider.client_secret | quote }},
+              scope = {{ .provider.scope | quote }},
+              authorize-url = {{ .provider.authorize_url | quote }},
+              token-url = {{ .provider.token_url | quote }},
+              {{- with .provider.user_url }}
+              user-url = {{ . | quote }},
+              {{- end }}
+              {{- with .provider.logout_url }}
+              logout-url = {{ . | quote }},
+              {{- end }}
+              sign-key = {{ .provider.sign_key | quote }},
+              sig-algo = {{ .provider.sig_algo | quote }}
+            },
+            collective-key = {{ .collective_key | quote }},
+            user-key = {{ .user_key | quote }}
+          }
+        {{- end }}
+        ]
+      oidc-auto-redirect = {{ $server.oidc_auto_redirect }}
+      {{- $integration_endpoint := $server.integration_endpoint }}
+      integration-endpoint {
+        enabled = {{ $integration_endpoint.enabled }}
+        priority = {{ $integration_endpoint.priority | quote }}
+        source-name = {{ $integration_endpoint.source_name | quote }}
+        allowed-ips {
+          enabled = {{ $integration_endpoint.allowed_ips.enabled }}
+          ips = [
+            {{- range initial $integration_endpoint.allowed_ips.ips }}
+            {{ . | quote }},
+            {{- end }}
+            {{ last $integration_endpoint.allowed_ips.ips | quote }}
+          ]
+        }
+        http-basic {
+          enabled = {{ $integration_endpoint.http_basic_auth.enabled }}
+          realm = {{ $integration_endpoint.http_basic_auth.realm | quote }}
+          user = {{ $integration_endpoint.http_basic_auth.user | quote }}
+          password = {{ $integration_endpoint.http_basic_auth.password | quote }}
+        }
+        http-header {
+          enabled = {{ $integration_endpoint.http_header.enabled }}
+          header-name = {{ $integration_endpoint.http_header.header_name | quote }}
+          header-value = {{ $integration_endpoint.http_header.header_value | quote }}
+        }
+      }
+      admin-endpoint {
+        secret = {{ $server.admin_endpoint.secret | quote }}
+      }
+      {{- $full_text_search := $server.full_text_search }}
+      full-text-search {
+        enabled = true
+        backend = "solr"
+        solr = {
+          url = {{ printf "http://%v:%v@%v-solr:8983/%v" .Values.solr.solrUsername (.Values.solr.solrPassword | trimAll "\"") .Release.Name .Values.solr.solrCores | quote }}
+          commit-within = {{ $full_text_search.solr.commit_within }}
+          log-verbose = {{ $full_text_search.solr.log_verbose }}
+          def-type = {{ $full_text_search.solr.def_type | quote }}
+          q-op = {{ $full_text_search.solr.q_op | quote }}
+        }
+        postgresql = {
+          use-default-connection = false
+          jdbc {
+            url = {{ printf "jdbc:postgresql://%v-%v:5432/%v" .Release.Name "postgresql" .Values.postgresql.postgresqlDatabase | quote }}
+            user = {{ .Values.postgresql.postgresqlUsername | quote }}
+            password = {{ .Values.postgresql.postgresqlPassword | trimAll "\"" | quote }}
+          }
+          pg-config = {
+          }
+          pg-query-parser = "websearch_to_tsquery"
+          pg-rank-normalization = [ 4 ]
+        }
+      }
+      {{- $backend := $server.backend }}
+      backend {
+        mail-debug = {{ $backend.mail_debug }}
+        jdbc {
+          url = {{ printf "jdbc:postgresql://%v-%v:5432/%v" .Release.Name "postgresql" .Values.postgresql.postgresqlDatabase | quote }}
+          user = {{ .Values.postgresql.postgresqlUsername | quote }}
+          password = {{ .Values.postgresql.postgresqlPassword | trimAll "\"" | quote }}
+        }
+        {{- $database_schema := $server.backend.database_schema }}
+        database-schema = {
+          run-main-migrations = {{ $database_schema.run_main_migrations }}
+          run-fixup-migrations = {{ $database_schema.run_fixup_migrations }}
+          repair-schema = {{ $database_schema.repair_schema }}
+        }
+        {{- $signup := $server.backend.signup }}
+        signup {
+          mode = {{ $signup.mode | quote }}
+          new-invite-password = {{ $new_invite_password | quote }}
+          invite-time = {{ $signup.invite_time | quote }}
+        }
+
+        {{- $files := $server.backend.files }}
+        files {
+          chunk-size = {{ $files.chunk_size }}
+          valid-mime-types = [
+            {{- range initial $files.valid_mime_types }}
+            {{ . | quote }},
+            {{- end }}
+            {{ last $files.valid_mime_types | quote }}
+          ]
+          default-store = {{ $files.default_store | quote }}
+          stores = {
+            database = {
+                enabled = {{ $files.stores.database.enabled }}
+                type = "default-database"
+              }
+            filesystem = {
+                enabled = {{ $files.stores.filesystem.enabled }}
+                type = "file-system"
+                directory = {{ $files.stores.filesystem.directory | quote }}
+              }
+            minio = {
+              enabled = {{ $files.stores.minio.enabled }}
+              type = "s3"
+              endpoint = {{ $files.stores.minio.endpoint | quote }}
+              access-key = {{ $files.stores.minio.access_key | quote }}
+              secret-key = {{ $files.stores.minio.secret_key | quote }}
+              bucket = {{ $files.stores.minio.bucket | quote }}
+            }
+          }
+        }
+        {{- $addons := $server.addons }}
+        addons = {
+          enabled = {{ $addons.enabled }}
+          allow-impure = {{ $addons.allow_impure }}
+          allowed-urls = [
+            {{- range initial $addons.allowed_urls }}
+            {{ . | quote }},
+            {{- end }}
+            {{ last $addons.allowed_urls | quote }}
+          ]
+          denied-urls = [
+            {{- range initial $addons.denied_urls }}
+            {{ . | quote }},
+            {{- end }}
+            {{ last $addons.denied_urls | quote }}
+          ]
+        }
+      }
+    }
+---
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+  name: {{ $joexSecretName }}
+  labels:
+    {{- include "tc.common.labels" . | nindent 4 }}
+stringData:
+  joex.conf: |
+    docspell.joex {
+      app-id = {{ $joexID | quote }}
+      base-url = {{ printf "%v:%v" "http://localhost" .Values.service.joex.ports.joex.port | quote }}
+      bind {
+        address = "0.0.0.0"
+        port = {{ .Values.service.joex.ports.joex.port }}
+      }
+      {{- $logging := $joex.logging }}
+      logging {
+        format = {{ $logging.format | quote }}
+        minimum-level = {{ $logging.minimum_level | quote }}
+        levels = {
+          "docspell" = {{ $logging.levels.docspell | quote }}
+          "org.flywaydb" = {{ $logging.levels.flywaydb | quote }}
+          "binny" = {{ $logging.levels.binny | quote }}
+          "org.http4s" = {{ $logging.levels.http4s | quote }}
+        }
+      }
+      jdbc {
+        url = {{ printf "jdbc:postgresql://%v-%v:5432/%v" .Release.Name "postgresql" .Values.postgresql.postgresqlDatabase | quote }}
+        user = {{ .Values.postgresql.postgresqlUsername | quote }}
+        password = {{ .Values.postgresql.postgresqlPassword | trimAll "\"" | quote }}
+      }
+      {{- $database_schema := $joex.database_schema }}
+      database-schema = {
+        run-main-migrations = {{ $database_schema.run_main_migrations }}
+        run-fixup-migrations = {{ $database_schema.run_fixup_migrations }}
+        repair-schema = {{ $database_schema.repair_schema }}
+      }
+      mail-debug = {{ $joex.mail_debug }}
+      send-mail {
+        list-id = {{ $joex.send_mail.list_id | quote }}
+      }
+      {{- $scheduler := $joex.scheduler }}
+      scheduler {
+        name = {{ $joexID | quote }}
+        pool-size = {{ $scheduler.pool_size }}
+        counting-scheme = {{ $scheduler.counting_scheme | quote }}
+        retries = {{ $scheduler.retries }}
+        retry-delay = {{ $scheduler.retry_delay | quote }}
+        log-buffer-size = {{ $scheduler.log_buffer_size }}
+        wakeup-period = {{ $scheduler.wakeup_period | quote }}
+      }
+      {{- $periodic_scheduler := $joex.periodic_scheduler }}
+      periodic-scheduler {
+        name = {{ $joexID | quote }}
+        wakeup-period = {{ $periodic_scheduler.wakeup_period | quote }}
+      }
+      {{- $user_tasks := $joex.user_tasks }}
+      user-tasks {
+        scan-mailbox {
+          max-folders = {{ $user_tasks.scan_mailbox.max_folders }}
+          mail-chunk-size = {{ $user_tasks.scan_mailbox.mail_chunk_size }}
+          max-mails = {{ $user_tasks.scan_mailbox.max_mails }}
+        }
+      }
+      {{- $house_keeping := $joex.house_keeping }}
+      house-keeping {
+        schedule = {{ $house_keeping.schedule | quote }}
+        cleanup-invites = {
+          enabled = {{ $house_keeping.cleanup_invites.enabled }}
+          older-than = {{ $house_keeping.cleanup_invites.older_than | quote }}
+        }
+        cleanup-remember-me = {
+          enabled = {{ $house_keeping.cleanup_remember_me.enabled }}
+          older-than = {{ $house_keeping.cleanup_remember_me.older_than | quote }}
+        }
+        cleanup-jobs = {
+          enabled = {{ $house_keeping.cleanup_jobs.enabled }}
+          older-than = {{ $house_keeping.cleanup_jobs.older_than | quote }}
+          delete-batch = {{ $house_keeping.cleanup_jobs.delete_batch | quote }}
+        }
+        cleanup-downloads = {
+          enabled = {{ $house_keeping.cleanup_downloads.enabled }}
+          older-than = {{ $house_keeping.cleanup_downloads.older_than | quote }}
+        }
+        check-nodes {
+          enabled = {{ $house_keeping.check_nodes.enabled }}
+          min-not-found = {{ $house_keeping.check_nodes.min_not_found }}
+        }
+        integrity-check {
+          enabled = {{ $house_keeping.integrity_check.enabled }}
+        }
+      }
+      update-check {
+        enabled = {{ $house_keeping.update_check.enabled }}
+        test-run = {{ $house_keeping.update_check.test_run }}
+        schedule = {{ $house_keeping.update_check.schedule | quote }}
+        sender-account = {{ $house_keeping.update_check.sender_account | quote }}
+        smtp-id = {{ $house_keeping.update_check.smtp_id | quote }}
+        recipients = [
+          {{- range initial $house_keeping.update_check.recipients }}
+          {{ . | quote }},
+          {{- end }}
+          {{ last $house_keeping.update_check.recipients | quote }}
+        ]
+        subject = {{ $house_keeping.update_check.subject | quote }}
+        body = {{ $house_keeping.update_check.body | quote }}
+      }
+      {{- $extraction := $joex.extraction }}
+      extraction {
+        pdf {
+          min-text-len = {{ $extraction.pdf.min_text_length }}
+        }
+        preview {
+          dpi = {{ $extraction.preview.dpi }}
+        }
+        ocr {
+          max-image-size = {{ $extraction.ocr.max_image_size }}
+          page-range {
+            begin = {{ $extraction.ocr.page_range.begin }}
+          }
+          ghostscript {
+            command {
+              program = {{ $extraction.ghostscript.command.program | quote }}
+              args = [
+                {{- range initial $extraction.ghostscript.command.args }}
+                {{ . | quote }},
+                {{- end }}
+                {{ last $extraction.ghostscript.command.args | quote }}
+              ]
+              timeout = {{ $extraction.ghostscript.command.timeout | quote }}
+            }
+            working-dir = {{ $extraction.ghostscript.working_dir | quote }}
+          }
+          unpaper {
+            command {
+              program = {{ $extraction.unpaper.command.program | quote }}
+              args = [
+                {{- range initial $extraction.unpaper.command.args }}
+                {{ . | quote }},
+                {{- end }}
+                {{ last $extraction.unpaper.command.args | quote }}
+              ]
+              timeout = {{ $extraction.unpaper.command.timeout | quote }}
+            }
+          }
+          tesseract {
+            command {
+              program = {{ $extraction.tesseract.command.program | quote }}
+              args = [
+                {{- range initial $extraction.tesseract.command.args }}
+                {{ . | quote }},
+                {{- end }}
+                {{ last $extraction.tesseract.command.args | quote }}
+              ]
+              timeout = {{ $extraction.tesseract.command.timeout | quote }}
+            }
+          }
+        }
+      }
+      {{- $text_analysis := $joex.text_analysis }}
+      text-analysis {
+        max-length = {{ $text_analysis.max_length }}
+        working-dir = {{ $text_analysis.working_dir | quote }}
+        nlp {
+          mode = {{ $text_analysis.nlp.mode }}
+          clear-interval = {{ $text_analysis.nlp.clear_interval | quote }}
+          max-due-date-years = {{ $text_analysis.nlp.max_due_date_years }}
+          regex-ner {
+            max-entries = {{ $text_analysis.nlp.regex_ner.max_entries }}
+            file-cache-time = {{ $text_analysis.nlp.regex_ner.file_cache_time }}
+          }
+        }
+        {{- $classification := $joex.classification }}
+        classification {
+          enabled = {{ $classification.enabled }}
+          item-count = {{ $classification.item_count }}
+          classifiers = [
+            {
+              "useSplitWords" = "{{ $classification.classifiers.useSplitWords }}"
+              "splitWordsTokenizerRegexp" = {{ $classification.classifiers.splitWordsTokenizerRegexp }}
+              "splitWordsIgnoreRegexp" = {{ $classification.classifiers.splitWordsIgnoreRegexp }}
+              "useSplitPrefixSuffixNGrams" = "{{ $classification.classifiers.useSplitPrefixSuffixNGrams }}"
+              "maxNGramLeng" = "{{ $classification.classifiers.maxNGramLeng }}"
+              "minNGramLeng" = "{{ $classification.classifiers.minNGramLeng }}"
+              "splitWordShape" = "{{ $classification.classifiers.intern }}"
+              "intern" = "{{ $classification.classifiers.intern }}"
+            }
+          ]
+        }
+      }
+      {{- $convert := $joex.convert }}
+      convert {
+        chunk-size = {{ $convert.chunk_size }}
+        converted-filename-part = {{ $convert.converted_filename_part }}
+        max-image-size = {{ $convert.max_image_size }}
+        markdown {
+          internal-css = """
+            {{ $convert.markdown.internal_css | quote }}
+          """
+        }
+        wkhtmlpdf {
+          command = {
+            program = {{ $convert.wkhtmlpdf.command.program | quote }}
+            args = [
+              {{- range initial $convert.wkhtmlpdf.command.args }}
+              {{ . | quote }},
+              {{- end }}
+              {{ last $convert.wkhtmlpdf.command.args | quote }}
+            ]
+            timeout = {{ $convert.wkhtmlpdf.command.timeout | quote }}
+          }
+          working-dir = {{ $convert.wkhtmlpdf.working_dir | quote }}
+        }
+        tesseract = {
+          command = {
+            program = {{ $convert.tesseract.command.program | quote }}
+            args = [
+              {{- range initial $convert.tesseract.command.args }}
+              {{ . | quote }},
+              {{- end }}
+              {{ last $convert.tesseract.command.args | quote }}
+            ]
+            timeout = {{ $convert.tesseract.command.timeout | quote }}
+          }
+          working-dir = {{ $convert.tesseract.working_dir | quote }}
+        }
+        unoconv = {
+          command = {
+            program = {{ $convert.unoconv.command.program | quote }}
+            args = [
+              {{- range initial $convert.unoconv.command.args }}
+              {{ . | quote }},
+              {{- end }}
+              {{ last $convert.unoconv.command.args | quote }}
+            ]
+            timeout = {{ $convert.tesseract.command.timeout | quote }}
+          }
+          working-dir = {{ $convert.unoconv.working_dir | quote }}
+        }
+        ocrmypdf = {
+          enabled = {{ $convert.ocrmypdf.enabled }}
+          command = {
+            program = {{ $convert.ocrmypdf.command.program | quote }}
+            args = [
+              {{- range initial $convert.ocrmypdf.command.args }}
+              {{ . | quote }},
+              {{- end }}
+              {{ last $convert.ocrmypdf.command.args | quote }}
+            ]
+            timeout = {{ $convert.ocrmypdf.command.timeout | quote }}
+          }
+          working-dir = {{ $convert.ocrmypdf.working_dir | quote }}
+        }
+        decrypt-pdf = {
+          enabled = {{ $convert.decrypt_pdf.enabled }}
+          passwords = [
+            {{- range initial $convert.decrypt_pdf.passwords }}
+            {{ . | quote }},
+            {{- end }}
+            {{ last $convert.decrypt_pdf.passwords | quote }}
+          ]
+        }
+      }
+      {{ $files := $joex.files }}
+      files {
+        chunk-size = {{ $files.chunk_size }}
+        valid-mime-types = [
+          {{- range initial $files.valid_mime_types }}
+          {{ . | quote }},
+          {{- end }}
+          {{ last $files.valid_mime_types | quote }}
+        ]
+        default-store = {{ $files.default_store | quote }}
+        stores = {
+          database = {
+              enabled = {{ $files.stores.database.enabled }}
+              type = "default-database"
+            }
+          filesystem = {
+              enabled = {{ $files.stores.filesystem.enabled }}
+              type = "file-system"
+              directory = {{ $files.stores.filesystem.directory | quote }}
+            }
+          minio = {
+            enabled = {{ $files.stores.minio.enabled }}
+            type = "s3"
+            endpoint = {{ $files.stores.minio.endpoint | quote }}
+            access-key = {{ $files.stores.minio.access_key | quote }}
+            secret-key = {{ $files.stores.minio.secret_key | quote }}
+            bucket = {{ $files.stores.minio.bucket | quote }}
+          }
+        }
+      }
+      {{- $full_text_search := $joex.full_text_search }}
+      full-text-search {
+        enabled = true
+        backend = "solr"
+        solr = {
+          url = {{ printf "http://%v:%v@%v-solr:8983/%v" .Values.solr.solrUsername (.Values.solr.solrPassword | trimAll "\"") .Release.Name .Values.solr.solrCores | quote }}
+          commit-within = {{ $full_text_search.solr.commit_within }}
+          log-verbose = {{ $full_text_search.solr.log_verbose }}
+          def-type = {{ $full_text_search.solr.def_type | quote }}
+          q-op = {{ $full_text_search.solr.q_op | quote }}
+        }
+        postgresql = {
+          use-default-connection = false
+          jdbc {
+            url = {{ printf "jdbc:postgresql://%v-%v:5432/%v" .Release.Name "postgresql" .Values.postgresql.postgresqlDatabase | quote }}
+            user = {{ .Values.postgresql.postgresqlUsername | quote }}
+            password = {{ .Values.postgresql.postgresqlPassword | trimAll "\"" | quote }}
+          }
+          pg-config = {
+          }
+          pg-query-parser = "websearch_to_tsquery"
+          pg-rank-normalization = [ 4 ]
+        }
+        migration = {
+          index-all-chunk = {{ $full_text_search.migration.index_all_chunk }}
+        }
+      }
+      {{- $addons := $joex.addons }}
+      addons {
+        working-dir = {{ $addons.working_dir }}
+        cache-dir = {{ $addons.cache_dir }}
+        executor-config {
+          runner = {{ $addons.executor_config.runner }}
+          nspawn = {
+            enabled = false
+            sudo-binary = "sudo"
+            nspawn-binary = "systemd-nspawn"
+            container-wait = "100 millis"
+          }
+          fail-fast = {{ $addons.executor_config.fail_fast }}
+          run-timeout = {{ $addons.executor_config.run_timeout | quote }}
+          nix-runner {
+            nix-binary = "nix"
+            build-timeout = "15 minutes"
+          }
+          docker-runner {
+            docker-binary = "docker"
+            build-timeout = "15 minutes"
+          }
+        }
+      }
+    }
+{{- end -}}
diff --git a/charts/incubator/docspell/templates/common.yaml b/charts/incubator/docspell/templates/common.yaml
new file mode 100644
index 00000000000..b04640b855d
--- /dev/null
+++ b/charts/incubator/docspell/templates/common.yaml
@@ -0,0 +1,13 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.common.loader.init" . }}
+
+{{/* Render secret */}}
+{{- include "docspell.secret" . }}
+
+{{- $_ := set .Values.additionalContainers "joex" (include "docspell.joex" . | fromYaml) -}}
+{{- if and .Values.dsc.enabled .Values.rest_server.integration_endpoint.enabled -}}
+{{- $_ := set .Values.additionalContainers "dsc" (include "docspell.dsc" . | fromYaml) -}}
+{{- end -}}
+
+{{/* Render the templates */}}
+{{ include "tc.common.loader.apply" . }}
diff --git a/charts/incubator/docspell/values.yaml b/charts/incubator/docspell/values.yaml
new file mode 100644
index 00000000000..f1a8eee382b
--- /dev/null
+++ b/charts/incubator/docspell/values.yaml
@@ -0,0 +1,539 @@
+image:
+  repository: tccr.io/truecharts/docspell-server
+  tag: v0.38.0@sha256:bcd3f651f83fc482a0bd8bb2606870146376656a438e7b8fe051f3496d405f3d
+  pullPolicy: IfNotPresent
+
+joexImage:
+  repository: tccr.io/truecharts/docspell-joex
+  tag: v0.38.0@sha256:16f2c2e32d8b20f8cdd1b62ae458ded2bbb16ed7bdc2727dc4a7624298ef7021
+  pullPolicy: IfNotPresent
+
+dscImage:
+  repository: tccr.io/truecharts/docspell-dsc
+  tag: v0.38.0@sha256:86c8100df78f47f00291de0c2395917427f6caacbf896691559296c0a805a7a9
+  pullPolicy: IfNotPresent
+
+args:
+  - /opt/server.conf
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
+securityContext:
+  runAsNonRoot: false
+  readOnlyRootFilesystem: false
+
+dsc:
+  # -- You need to enable integration endpoint with HTTP Header in rest server
+  # -- If you enable allowed IPs you also need 127.0.0.1 as an entry there
+  enabled: false
+  # move | delete
+  imported_action: move
+  not_match_glob: "**/.*"
+  match_glob: ""
+  language: ""
+  tag: ""
+
+rest_server:
+  # -- App name, shows on the top right corner
+  app_name: Docspell
+  base_url: ""
+  logging:
+    # -- The format for the log messages. Can be one of:
+    # -- Json | Logfmt | Fancy | Plain
+    format: Fancy
+    # -- The minimum level to log. From lowest to highest:
+    # -- Trace | Debug | Info | Warn | Error
+    minimum_level: Warn
+    levels:
+      # -- Override the log level of specific loggers
+      docspell: Info
+      flywaydb: Info
+      binny: Info
+      http4s: Info
+  server_opts:
+    # -- Enable HTTP2
+    enable_http2: false
+    # -- Maximum allowed connections
+    max_connections: 1024
+    # -- Timeout for waiting for the first output of the response
+    response_timeout: 45s
+  # -- This is a hard limit to restrict the size of a batch that is returned when searching for items.
+  max_item_page_size: 200
+  # -- The number of characters to return for each item notes when searching.
+  max_note_length: 180
+  # -- This defines whether the classification form in the collective settings is displayed or not.
+  show_classification_settings: true
+  auth:
+    # -- How long a authentication token is valid
+    session_valid: 5 minutes
+    remember_me:
+      enabled: true
+      # -- How long the remember me cookie/token is valid.
+      valid: 30 days
+  download_all:
+    # -- How many files to allow in a zip.
+    max_files: 500
+    # -- The maximum (uncompressed) size of the zip file contents.
+    max_size: 1400M
+  openid:
+    - enabled: false
+      display: Keycloak
+      provider:
+        provider_id: keycloak
+        client_id: docspell
+        client_secret: example-secret-439e-bf06-911e4cdd56a6
+        scope: profile
+        authorize_url: http://localhost:8080/auth/realms/home/protocol/openid-connect/auth
+        token_url: http://localhost:8080/auth/realms/home/protocol/openid-connect/token
+        user_url: ""
+        logout_url: http://localhost:8080/auth/realms/home/protocol/openid-connect/logout
+        sign_key: b64:anVzdC1hLXRlc3Q=
+        sig_algo: RS512
+      collective_key: lookup:docspell_collective
+      user_key: preferred_username
+    - enabled: false
+      display: Github
+      provider:
+        provider_id: github
+        client_id: <your github client id>
+        client_secret: <your github client secret>
+        scope: ""
+        authorize_url: https://github.com/login/oauth/authorize
+        token_url: https://github.com/login/oauth/access_token
+        user_url: https://api.github.com/user
+        logout_url: ""
+        sign_key: ""
+        sig_algo: RS256
+      collective_key: fixed:demo
+      user_key: login
+  oidc_auto_redirect: true
+  integration_endpoint:
+    enabled: false
+    # -- The priority to use when submitting files through this endpoint.
+    # low | high
+    priority: low
+    # -- The name used for the item "source" property when uploaded through this endpoint.
+    source_name: integration
+    allowed_ips:
+      enabled: false
+      ips:
+        - "127.0.0.1"
+    http_basic_auth:
+      enabled: false
+      realm: Docspell Integration
+      user: docspell-int
+      password: docspell-int
+    http_header:
+      enabled: false
+      header_name: Docspell-Integration
+      header_value: some-secret
+  admin_endpoint:
+    # -- Disables endpoint if empty
+    secret: ""
+  full_text_search:
+    solr:
+      # -- Used to tell solr when to commit the data
+      commit_within: 1000
+      # -- If true, logs request and response bodies
+      log_verbose: false
+      def_type: lucene
+      # -- The default combiner for tokens. One of AND | OR
+      q_op: OR
+  backend:
+    # -- Enable or disable debugging for e-mail related functionality
+    mail_debug: false
+    database_schema:
+      # -- Whether to run main database migrations.
+      run_main_migrations: true
+      # -- Whether to run the fixup migrations.
+      run_fixup_migrations: true
+      # -- Use with care. This repairs all migrations in the database by updating their checksums and removing failed migrations.
+      repair_schema: false
+    signup:
+      # -- The mode defines if new users can signup or not.
+      # open | invite | closed
+      mode: open
+      # -- This is the period an invitation token is considered valid.
+      invite_time: 3 days
+    files:
+      # -- Defines the chunk size (in bytes) used to store the files.
+      chunk_size: 524288
+      # -- The file content types that are considered valid.
+      valid_mime_types: []
+      # database | minio | filesystem
+      default_store: database
+      stores:
+        database:
+          enabled: true
+        minio:
+          enabled: false
+          endpoint: http://localhost:9000
+          access_key: access_key
+          secret_key: secret_key
+          bucket: docspell
+        # -- Highly NOT recommended
+        filesystem:
+          enabled: false
+          directory: /documents
+  addons:
+    # TODO: Check how exactly addons work. There are mentions of docker daemon
+    enabled: false
+    # -- Whether installing addons requiring network should be allowed or not.
+    allow_impure: true
+    # -- Define patterns of urls that are allowed to install addons from.
+    allowed_urls:
+      - "*"
+    # -- Define patterns of urls that are denied to install addons from.
+    denied_urls: []
+
+joex:
+  logging:
+    # -- The format for the log messages. Can be one of:
+    # -- Json | Logfmt | Fancy | Plain
+    format: Fancy
+    # -- The minimum level to log. From lowest to highest:
+    # -- Trace | Debug | Info | Warn | Error
+    minimum_level: Warn
+    levels:
+      # -- Override the log level of specific loggers
+      docspell: Info
+      flywaydb: Info
+      binny: Info
+      http4s: Info
+  database_schema:
+    # -- Whether to run main database migrations.
+    run_main_migrations: false
+    # -- Whether to run the fixup migrations.
+    run_fixup_migrations: true
+    # -- Use with care. This repairs all migrations in the database by updating their checksums and removing failed migrations.
+    repair_schema: false
+  # -- Enable or disable debugging for e-mail related functionality. This applies to both sending and receiving mails.
+  mail_debug: false
+  send_mail:
+    # -- This is used as the List-Id e-mail header when mails are sent from docspell to its users
+    list_id: ""
+  scheduler:
+    # -- Number of processing allowed in parallel.
+    pool_size: 1
+    # -- A counting scheme determines the ratio of how high and low priority jobs are run.
+    counting_scheme: 4,1
+    # -- How many times a failed job should be retried until it enters failed state.
+    retries: 2
+    # -- The delay until the next try is performed for a failed job.
+    retry_delay: 1 minute
+    # -- The queue size of log statements from a job.
+    log_buffer_size: 500
+    # -- If no job is left in the queue, the scheduler will wait until a notify is requested.
+    wakeup_period: 30 minutes
+  periodic_scheduler:
+    # -- A fallback to start looking for due periodic tasks regularly.
+    wakeup_period: 10 minutes
+  user_tasks:
+    scan_mailbox:
+      # -- A limit of how many folders to scan through.
+      max_folders: 50
+      # -- How many mails (headers only) to retrieve in one chunk.
+      mail_chunk_size: 50
+      # -- A limit on how many mails to process in one job run.
+      max_mails: 500
+  house_keeping:
+    # -- When the house keeping tasks execute.
+    schedule: Sun *-*-* 00:00:00 UTC
+    # -- This task removes invitation keys that have been created but not used.
+    cleanup_invites:
+      # -- Whether this task is enabled.
+      enabled: true
+      # -- The minimum age of invites to be deleted.
+      older_than: 30 days
+    # -- This task removes expired remember-me tokens.
+    cleanup_remember_me:
+      # -- Whether this task is enabled.
+      enabled: true
+      # -- The minimum age of tokens to be deleted.
+      older_than: 30 days
+    # -- Jobs store their log output in the database.
+    cleanup_jobs:
+      # -- Whether this task is enabled.
+      enabled: true
+      # -- The minimum age of jobs to delete.
+      older_than: 30 days
+      # -- This defines how many jobs are deleted in one transaction.
+      delete_batch: 100
+    # -- Zip files created for downloading multiple files are cached and can be cleared periodically.
+    cleanup_downloads:
+      # -- Whether this task is enabled.
+      enabled: true
+      # -- The minimum age of a download file to be deleted.
+      older_than: 14 days
+    # -- Removes node entries that are not reachable anymore.
+    check_nodes:
+      # -- Whether this task is enabled.
+      enabled: true
+      # -- How often the node must be unreachable, before it is removed.
+      min_not_found: 2
+    # -- Checks all files against their checksum
+    integrity_check:
+      enabled: true
+    # -- A periodic task to check for new releases of docspell.
+    update_check:
+      # -- Whether to enable this task
+      enabled: false
+      # -- Sends the mail without checking the latest release.
+      test_run: false
+      # -- When the update check should execute.
+      schedule: "Sun *-*-* 00:00:00 UTC"
+      # -- An account id in form of `collective/user`
+      sender_account: ""
+      # -- The SMTP connection id that should be used for sending the mail.
+      smtp_id: ""
+      # -- A list of recipient e-mail addresses.
+      recipients: []
+      # -- The subject of the mail.
+      subject: Docspell {{ latestVersion }} is available
+      # -- The body of the mail.
+      body: |
+        Hello,
+
+        You are currently running Docspell {{ currentVersion }}. Version *{{ latestVersion }}*
+        is now available, which was released on {{ releasedAt }}. Check the release page at
+
+        <https://github.com/eikek/docspell/releases/latest>
+
+        Have a nice day!
+
+        Docspell Update Check
+  # -- Configuration of text extraction
+  extraction:
+    pdf:
+      min_text_length: 500
+    preview:
+      # -- When rendering a pdf page, use this dpi.
+      dpi: 32
+    ocr:
+      # -- Images greater than this size are skipped.
+      max_image_size: 14000000
+      page_range:
+        # -- Defines what pages to process.
+        begin: 10
+    # -- The ghostscript command.
+    ghostscript:
+      command:
+        program: gs
+        args:
+          - -dNOPAUSE
+          - -dBATCH
+          - -dSAFER
+          - -sDEVICE=tiffscaled8
+          - "-sOutputFile={{outfile}}"
+          - "{{infile}}"
+        timeout: 5 minutes
+      working_dir: /tmp/docspell-extraction
+    # -- The unpaper command.
+    unpaper:
+      command:
+        program: unpaper
+        args:
+          - "{{infile}}"
+          - "{{outfile}}"
+        timeout: 5 minutes
+    # -- The tesseract command.
+    tesseract:
+      command:
+        program: tesseract
+        args:
+          - "{{file}}"
+          - stdout
+          - -l
+          - "{{lang}}"
+        timeout: 5 minutes
+  text_analysis:
+    # -- Maximum length of text to be analyzed.
+    max_length: 0
+    working_dir: /tmp/docspell-analysis
+    nlp:
+      # -- The mode for configuring NLP models
+      # -- full | basic | regexonly | disabled
+      mode: full
+      clear_interval: 15 minutes
+      # -- Restricts proposals for due dates.
+      max_due_date_years: 10
+      regex_ner:
+        # -- Whether to enable custom NER annotation.
+        max_entries: 1000
+        file_cache_time: 1 minute
+  classification:
+    # -- Whether to enable classification globally.
+    enabled: true
+    # -- This limit and `text-analysis.max-length` define how much memory is required.
+    item_count: 600
+    # -- Enclose regexps in triple quotes.
+    classifiers:
+      useSplitWords: true
+      splitWordsTokenizerRegexp: '"""[\p{L}][\p{L}0-9]*|(?:\$ ?)?[0-9]+(?:\.[0-9]{2})?%?|\s+|."""'
+      splitWordsIgnoreRegexp: '"""\s+"""'
+      useSplitPrefixSuffixNGrams: true
+      maxNGramLeng: 4
+      minNGramLeng: 1
+      splitWordShape: chris4
+      intern: true
+  # -- Configuration for converting files into PDFs.
+  convert:
+    # -- The chunk size used when storing files.
+    chunk_size: 524288
+    # -- A string used to change the filename of the converted pdf file.
+    converted_filename_part: converted
+    # -- When reading images, this is the maximum size.
+    max_image_size: 14000000
+    markdown:
+      # -- The CSS that is used to style the resulting HTML.
+      internal_css: "body { padding: 2em 5em; }"
+    wkhtmlpdf:
+      command:
+        program: wkhtmltopdf
+        args:
+          - -s
+          - A4
+          - --encoding
+          - "{{enconding}}"
+          - --load-error-handling
+          - ignore
+          - --load-media-error-handling
+          - ignore
+          - "-"
+          - "{{outfile}}"
+        timeout: 2 minutes
+      working_dir: /tmp/docspell-convert
+    tesseract:
+      command:
+        program: tesseract
+        args:
+          - "{{infile}}"
+          - out
+          - -l
+          - "{{lang}}"
+          - pdf
+          - txt
+        timeout: 5 minutes
+      working_dir: /tmp/docspell-convert
+    unoconv:
+      command:
+        program: unoconv
+        args:
+          - -f
+          - pdf
+          - -o
+          - "{{outfile}}"
+          - "{{infile}}"
+        timeout: 5 minutes
+      working_dir: /tmp/docspell-convert
+    ocrmypdf:
+      enabled: true
+      command:
+        program: ocrmypdf
+        args:
+          - -l
+          - "{{lang}}"
+          - --skip-text
+          - --deskew
+          - -j
+          - "1"
+          - "{{infile}}"
+          - "{{outfile}}"
+        timeout: 5 minutes
+      working_dir: /tmp/docspell-convert
+    decrypt_pdf:
+      enabled: true
+      passwords: []
+  files:
+    # -- Defines the chunk size (in bytes) used to store the files.
+    chunk_size: 524288
+    # -- The file content types that are considered valid.
+    valid_mime_types: []
+    # database | minio | filesystem
+    default_store: database
+    stores:
+      database:
+        enabled: true
+      minio:
+        enabled: false
+        endpoint: http://localhost:9000
+        access_key: access_key
+        secret_key: secret_key
+        bucket: docspell
+      # -- Highly NOT recommended
+      filesystem:
+        enabled: false
+        directory: /documents
+  full_text_search:
+    solr:
+      # -- Used to tell solr when to commit the data
+      commit_within: 1000
+      # -- If true, logs request and response bodies
+      log_verbose: false
+      def_type: lucene
+      # -- The default combiner for tokens. One of AND | OR
+      q_op: OR
+    migration:
+      index_all_chunk: 10
+  addons:
+    # TODO: Check TODO above for addons
+    working_dir: /tmp/docspell-addons
+    cache_dir: /tmp/docspell-addons-cache
+    executor_config:
+      runner: trivial
+      fail_fast: true
+      run_timeout: 15 minutes
+
+service:
+  main:
+    ports:
+      main:
+        port: 10320
+        protocol: HTTP
+  joex:
+    enabled: true
+    type: ClusterIP
+    ports:
+      joex:
+        enabled: true
+        port: 10321
+        protocol: HTTP
+
+persistence:
+  server:
+    enabled: true
+    type: secret
+    readOnly: true
+    defaultMode: "0600"
+    objectName: '{{ include "tc.common.names.fullname" . }}-server-secret'
+    mountPath: /opt/server.conf
+    subPath: server.conf
+  joex:
+    enabled: true
+    type: secret
+    noMount: true
+    readOnly: true
+    defaultMode: "0600"
+    objectName: '{{ include "tc.common.names.fullname" . }}-joex-secret'
+    mountPath: /opt/joex.conf
+    subPath: joex.conf
+  import:
+    enabled: true
+    noMount: true
+    mountPath: /import
+postgresql:
+  enabled: true
+  existingSecret: dbcreds
+  postgresqlUsername: docspell
+  postgresqlDatabase: docspell
+
+solr:
+  enabled: true
+  existingSecret: solrcreds
+  solrCores: docspell
+  solrUsername: docspell
+
+portal:
+  enabled: true
diff --git a/cspell.config.yaml b/cspell.config.yaml
index 7ede7f6a810..937c82dc226 100644
--- a/cspell.config.yaml
+++ b/cspell.config.yaml
@@ -55,6 +55,7 @@ words:
   - dnsserver
   - dnsservers
   - dockerized
+  - docspell
   - duplicati
   - dynmap
   - ebgp
@@ -102,6 +103,7 @@ words:
   - jacobalberty
   - jailman
   - javaprefs
+  - joex
   - jovyan
   - kavita
   - keepalive
@@ -270,6 +272,7 @@ words:
   - vaultwarden
   - vdev
   - vm's
+  - wakeup
   - watchyourlan
   - webbasecontrol
   - webpanel