# ============================================================================
# EXAMPLE: Rancher Installation with Traefik Ingress
# ============================================================================
# This is an example configuration to install Seawise Dashboard on a
# Rancher cluster with Traefik Ingress Controller

image:
  repository: shwcloud/seawise-backup
  tag: "v1.7.1"
  pullPolicy: IfNotPresent

app:
  # Namespace where Velero is installed (common on Rancher)
  veleroNamespace: "velero"

  # Timezone - adjust according to your location
  timezone: "America/Sao_Paulo"

  # IMPORTANT: Generate a secure secret key for production!
  # openssl rand -hex 32
  secretKey: ""

persistence:
  enabled: true
  # Default Rancher storage class
  storageClassName: "local-path"
  size: 1Gi

ingress:
  enabled: true
  className: ""  # Leave empty for Rancher's default Traefik
  annotations:
    kubernetes.io/ingress.allow-http: "false"
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
    # Uncomment if using cert-manager:
    # cert-manager.io/cluster-issuer: letsencrypt-prod
  hosts:
    - host: seawise-backup.192.168.100.97.sslip.io  # CHANGE: Use your cluster IP
      paths:
        - path: /
          pathType: Prefix
  tls:
    - hosts:
        - seawise-backup.192.168.100.97.sslip.io  # Same host as above
  # To use custom domain with cert-manager:
  # tls:
  #   - secretName: seawise-tls
  #     hosts:
  #       - seawise.your-domain.com

# Required for Rancher/Kubernetes: ensures PVC is writable by non-root container
podSecurityContext:
  runAsNonRoot: true
  runAsUser: 1000
  fsGroup: 1000

securityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
    - ALL
  readOnlyRootFilesystem: false
  runAsNonRoot: true
  runAsUser: 1000

resources:
  requests:
    cpu: 250m
    memory: 256Mi
  limits:
    cpu: 500m
    memory: 512Mi