infra4talos/everything-app/ntfy.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: ntfy
  namespace: argocd
spec:
  destination:
    namespace: ntfy
    server: https://kubernetes.default.svc
  project: default
  source:
    helm:
      parameters:
      - name: service.type
        value: LoadBalancer
      - name: persistence.cache.enabled
        value: "true"
      - name: persistence.cache.storageClass
        value: "longhorn-fast"
      - name: persistence.data.enabled
        value: "true"
      - name: persistence.data.storageClass
        value: "longhorn-fast"
      values: |2-

        ingress:
          enabled: true
          annotations:
            cert-manager.io/cluster-issuer: letsencrypt
            kubernetes.io/ingress.class: nginx
            external-dns.alpha.kubernetes.io/target: armnleg.martyn.berlin
            nginx.ingress.kubernetes.io/server-snippets: |
              location / {
                proxy_set_header Upgrade $http_upgrade;
                proxy_http_version 1.1;
                proxy_set_header X-Forwarded-Host $http_host;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-Forwarded-For $remote_addr;
                proxy_set_header Host $host;
                proxy_set_header Connection "upgrade";
                proxy_cache_bypass $http_upgrade;
              }
          hosts:
          - host: ntfy.martyn.berlin
            paths:
            - path: /
              pathType: Prefix
          tls:
          - secretName: ntfy-tls
            hosts:
            - ntfy.martyn.berlin

        ntfy:
          config:
            base-url: "https://ntfy.martyn.berlin"
            cache-file: "/var/cache/ntfy/cache.db"
            attachment-cache-dir: "/var/cache/ntfy/attachments"
            auth-file: "/var/lib/ntfy/user.db"
            auth-default-access: "deny-all"
    path: apps-helm/ntfy
    repoURL: https://git.martyn.berlin/martyn/infra4talos.git
    targetRevision: HEAD