home-assistant:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
            tag: 2025.12.4
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
          resources:
            requests:
              cpu: 50m
              memory: 512Mi
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
            tag: 4.107.0@sha256:0d48d3a48b7db214556bea453ed371f0d295130fb5c3d43534aedb41627446f2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: US/Central
            - name: PUID
              value: 1000
            - name: PGID
              value: 1000
            - name: DEFAULT_WORKSPACE
              value: /config
          envFrom:
            - secretRef:
                name: home-assistant-code-server-password-secret
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
  service:
    main:
      controller: main
      ports:
        http:
          port: 80
          targetPort: 8123
          protocol: TCP
    code-server:
      controller: main
      ports:
        http:
          port: 8443
          targetPort: 8443
          protocol: HTTP
  serviceMonitor:
    main:
      selector:
        matchLabels:
          app.kubernetes.io/name: home-assistant
          app.kubernetes.io/instance: home-assistant
          app.kubernetes.io/service: home-assistant-main
      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
      endpoints:
        - port: http
          interval: 3m
          scrapeTimeout: 1m
          path: /api/prometheus
          bearerTokenSecret:
            name: home-assistant-token-secret
            key: bearer-token
  route:
    main:
      kind: HTTPRoute
      parentRefs:
        - group: gateway.networking.k8s.io
          kind: Gateway
          name: traefik-gateway
          namespace: traefik
      hostnames:
        - home-assistant.alexlebens.net
      rules:
        - backendRefs:
            - group: ''
              kind: Service
              name: home-assistant-main
              port: 80
              weight: 100
          matches:
            - path:
                type: PathPrefix
                value: /
    code-server:
      kind: HTTPRoute
      parentRefs:
        - group: gateway.networking.k8s.io
          kind: Gateway
          name: traefik-gateway
          namespace: traefik
      hostnames:
        - home-assistant-code-server.alexlebens.net
      rules:
        - backendRefs:
            - group: ''
              kind: Service
              name: home-assistant-code-server
              port: 8443
              weight: 100
          matches:
            - path:
                type: PathPrefix
                value: /
  persistence:
    config:
      forceRename: home-assistant-config
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 5Gi
      advancedMounts:
        main:
          main:
            - path: /config
              readOnly: false
          code-server:
            - path: /config/home-assistant
              readOnly: false
volsync-target-config:
  pvcTarget: home-assistant-config
  moverSecurityContext:
    runAsUser: 1000
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch