harbor:
  expose:
    type: route
    tls:
      enabled: false
    route:
      parentRefs:
        - group: gateway.networking.k8s.io
          kind: Gateway
          name: traefik-gateway
          namespace: traefik
      hosts:
        - harbor.alexlebens.net
  externalURL: https://harbor.alexlebens.net
  persistence:
    enabled: true
    persistentVolumeClaim:
      registry:
        storageClass: ceph-block
        accessMode: ReadWriteOnce
        size: 100Gi
  existingSecretAdminPassword: harbor-secret
  existingSecretAdminPasswordKey: HARBOR_ADMIN_PASSWORD
  ipFamily:
    ipv6:
      enabled: false
  updateStrategy:
    type: Recreate
  existingSecretSecretKey: harbor-secret
  enableMigrateHelmHook: true
  metrics:
    enabled: true
    serviceMonitor:
      enabled: true
  cache:
    enabled: true
  portal:
    image:
      repository: ghcr.io/goharbor/harbor-portal
      tag: v2.15.1@sha256:ac55161c57a8351807adf8f8def264bdd52667c371d0436beefebdac4341c9e2
    replicas: 2
  core:
    image:
      repository: ghcr.io/goharbor/harbor-core
      tag: v2.15.1@sha256:887a85b8ea98b76bfc9f715f1a0785bb99f9a1034241513902dd6e95be922a83
    replicas: 2
    existingSecret: harbor-secret
    secretName: harbor-secret
    existingXsrfSecret: harbor-secret
  jobservice:
    image:
      repository: ghcr.io/goharbor/harbor-jobservice
      tag: v2.15.1@sha256:0de4fd2ce3a02d3e6591b439e4674ea085885ddf43652b44004cc67eb19dba12
    replicas: 2
    jobLoggers:
      - stdout
    existingSecret: harbor-secret
  registry:
    registry:
      image:
        repository: goharbor/registry-photon
        tag: v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
    controller:
      image:
        repository: ghcr.io/goharbor/harbor-registryctl
        tag: v2.15.1@sha256:554147a956989175f63f8d41573d716c6ddf6052acd1749c88c0f99ce6ee2bff
    existingSecret: harbor-secret
    relativeurls: true
    credentials:
      existingSecret: harbor-secret
    upload_purging:
      age: 72h
  trivy:
    enabled: true
    image:
      repository: ghcr.io/goharbor/trivy-adapter-photon
      tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
  database:
    type: external
    external:
      host: harbor-postgresql-18-cluster-rw
      port: "5432"
      username: app
      coreDatabase: app
      existingSecret: harbor-postgresql-18-cluster-app
  redis:
    type: external
    external:
      addr: harbor-valkey.harbor:6379
  exporter:
    image:
      repository: ghcr.io/goharbor/harbor-exporter
      tag: v2.15.1@sha256:372275b6b6abeb571fa7bd5de458e3d75f1a1636503b3c0abe02938f2b285d75
    replicas: 2
postgres-18-cluster:
  mode: recovery
  recovery:
    method: objectStore
    objectStore:
      index: 2
  backup:
    objectStore:
      - name: garage-local
        index: 2
        destinationBucket: postgres-backups
        externalSecretCredentialPath: /garage/home-infra/postgres-backups
        isWALArchiver: true
    scheduledBackups:
      - name: live-backup
        suspend: false
        immediate: true
        schedule: "0 35 14 * * *"
        backupName: garage-local
valkey:
  valkey:
    resources:
      requests:
        memory: 30Mi