# Production values.yaml example
# Copy this file and modify as needed

global:
  domainSuffix: "pb.xiongxiao.me"

image:
  repository: pocketbase/pocketbase
  tag: "0.22.21"
  pullPolicy: IfNotPresent

# List of PocketBase instances
instances:
  - id: "app1"
    domain: "app1.pb.xiongxiao.me"
    replicaCount: 2
    resources:
      requests:
        cpu: 200m
        memory: 512Mi
      limits:
        cpu: 1000m
        memory: 1Gi
  - id: "app2"
    domain: "app2.pb.xiongxiao.me"
    replicaCount: 1
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        cpu: 500m
        memory: 512Mi
  - id: "test"
    domain: "test.pb.xiongxiao.me"
    replicaCount: 1

# Resource settings for instances without explicit resources
resources:
  requests:
    cpu: 100m
    memory: 256Mi
  limits:
    cpu: 500m
    memory: 512Mi

# Persistence
persistence:
  enabled: true
  storageClass: "local-path"
  size: 5Gi
  accessMode: ReadWriteOnce

# PostgreSQL
postgresql:
  enabled: false
  host: "postgresql.postgres.svc.cluster.local"
  port: 5432
  database: "pocketbase"
  username: "postgres"
  passwordSecret:
    name: "postgresql-credentials"
    key: "password"

# Traefik Ingress
ingress:
  className: "traefik"
  enabled: true
  annotations: {}

# Security
podSecurityContext:
  runAsUser: 1000
  runAsGroup: 1000
  fsGroup: 1000

securityContext:
  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: false
  capabilities:
    drop:
      - ALL