version: 1
kind: UniDeskHostK8sDeployment
metadata:
  name: unidesk-host
  owner: unidesk

target:
  id: NC01
  kubeContext: local-k3s
  namespace: unidesk

runtime:
  environment: prod
  deployRef: config/unidesk-host-k8s.yaml
  repository: https://github.com/pikasTech/unidesk
  commit: local-host-k8s
  publicHost: 152.53.229.148
  noProxy: localhost,127.0.0.1,::1,.svc,.svc.cluster.local,hyueapi.com,.hyueapi.com

images:
  postgres: postgres:16-alpine
  backendCore: unidesk-backend-core:host-k8s
  frontend: unidesk-frontend:host-k8s

database:
  mode: host-native
  host: 10.42.0.1
  serviceName: database
  pvcName: unidesk-postgres-data
  storageSize: 15Gi
  storageClassName: local-path
  port: 5432
  resources:
    requests:
      cpu: 100m
      memory: 256Mi
    limits:
      cpu: 500m
      memory: 512Mi

services:
  backendCore:
    deploymentName: backend-core
    serviceName: backend-core
    providerPublicServiceName: backend-core-provider
    containerPort: 8080
    providerPort: 8081
    providerDataPort: 8082
    providerPublicPort: 18082
    providerDataPublicPort: 18084
    logFile: /var/log/unidesk/backend-core.jsonl
    resources:
      requests:
        cpu: 100m
        memory: 192Mi
      limits:
        memory: 768Mi
  frontend:
    deploymentName: frontend
    serviceName: frontend
    containerPort: 8080
    publicPort: 18081
    logFile: /var/log/unidesk/frontend.jsonl
    resources:
      requests:
        cpu: 80m
        memory: 128Mi
      limits:
        memory: 512Mi

runtimeConfig:
  heartBeatTimeoutMs: "30000"
  taskPendingTimeoutMs: "600000"
  databasePoolMax: "4"
  sessionTtlSeconds: "28800"
  authUsername: admin
  sshClientRouteAllowlist: "*"
  microservicesJson: "[]"

runtimeSecrets:
  sourceRef:
    path: .state/secrets/unidesk-host-k8s.env
  target:
    name: unidesk-runtime-secrets
    keys:
      postgresUser: POSTGRES_USER
      postgresPassword: POSTGRES_PASSWORD
      postgresDb: POSTGRES_DB
      databaseUrl: DATABASE_URL
      providerToken: PROVIDER_TOKEN
      sshClientToken: UNIDESK_SSH_CLIENT_TOKEN
      authPassword: AUTH_PASSWORD
      sessionSecret: SESSION_SECRET