replicaCount: 1

strategy:
  type: Recreate

image:
  repository: registry.itsh.dev/s0wlz/tutortool
  pullPolicy: IfNotPresent
  tag: latest

serviceAccount:
  create: true
  name: ""

service:
  port: 80
  targetPort: 3000

containerPort: 3000

resources:
  requests:
    cpu: 50m
    memory: 64Mi
  limits:
    cpu: 200m
    memory: 256Mi

pvc:
  storageClassName: hcloud-volumes
  storage: 1Gi

imagePullSecrets:
  - name: itsh-registry

httpRoute:
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
  parentRefs:
    - name: default
      namespace: nginx-gateway
  hostnames:
    - tutor.puchstein.dev
  sectionName: https-tutor-puchstein-dev
  httpRedirectSectionName: http

# JWT_SECRET provisioned as a pre-existing K8s Secret named here.
# Do not set jwtSecretValue in committed values — provision via kubectl manually.
jwtSecretName: tutortool-jwt

env:
  DATABASE_URL: sqlite:/data/attendance.db
  STATIC_DIR: /app/frontend/build
  extra: {}
  # extra:
  #   DEMO: "true"   # seeds demo data on startup (idempotent, INSERT OR IGNORE)

vpa:
  enabled: false
  updateMode: "Off"
  containerPolicies:
    - containerName: app
      minAllowed:
        cpu: 10m
        memory: 32Mi
      maxAllowed:
        cpu: 1000m
        memory: 512Mi