apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: ntfy
  namespace: argocd
spec:
  destination:
    namespace: ntfy
    server: https://kubernetes.default.svc
  project: default
  source:
    helm:
      parameters:
        - name: service.type
          value: LoadBalancer
        - name: persistence.cache.enabled
          value: 'true'
        - name: persistence.cache.storageClass
          value: longhorn-fast
        - name: persistence.data.enabled
          value: 'true'
        - name: persistence.data.storageClass
          value: longhorn-fast
      valuesObject:
        ingress:
          enabled: true
          annotations:
            cert-manager.io/cluster-issuer: letsencrypt
            kubernetes.io/ingress.class: nginx
            external-dns.alpha.kubernetes.io/target: armnleg.martyn.berlin
            nginx.ingress.kubernetes.io/server-snippets: "location / {\n  proxy_set_header\
              \ Upgrade $http_upgrade;\n  proxy_http_version 1.1;\n  proxy_set_header X-Forwarded-Host\
              \ $http_host;\n  proxy_set_header X-Forwarded-Proto $scheme;\n  proxy_set_header\
              \ X-Forwarded-For $remote_addr;\n  proxy_set_header Host $host;\n  proxy_set_header\
              \ Connection \"upgrade\";\n  proxy_cache_bypass $http_upgrade;\n}\n"
          hosts:
            - host: ntfy.martyn.berlin
              paths:
                - path: /
                  pathType: Prefix
          tls:
            - hosts:
                - ntfy.martyn.berlin
        ntfy:
          config:
            base-url: https://ntfy.martyn.berlin
            cache-file: /var/cache/ntfy/cache.db
            attachment-cache-dir: /var/cache/ntfy/attachments
            auth-file: /var/lib/ntfy/user.db
            auth-default-access: deny-all

    path: apps-helm/ntfy
    repoURL: http://forgejo.git.svc.cluster.local/martyn/infra4talos.git
    targetRevision: HEAD
  syncPolicy:
    automated:
      selfHeal: true