kube-prometheus-stack:
  crds:
    enabled: false
  defaultRules:
    create: true
    rules:
      kubeControllerManager: false
      kubeSchedulerAlerting: false
      kubeSchedulerRecording: false
  global:
    rbac:
      create: true
      createAggregateClusterRoles: true
  alertmanager:
    enabled: true
    config:
      route:
        group_by: ["namespace", "alertname"]
        group_wait: 30s
        group_interval: 5m
        repeat_interval: 24h
        receiver: ntfy
        routes:
          - receiver: ntfy
            group_wait: 10s
            group_interval: 5m
            repeat_interval: 24h
      receivers:
        - name: pushover
          pushover_configs:
            - send_resolved: true
              user_key_file: /etc/alertmanager/secrets/alertmanager-config-secret/pushover_user_key
              token_file: /etc/alertmanager/secrets/alertmanager-config-secret/pushover_token
        - name: ntfy
          webhook_configs:
            - url: http://ntfy-alertmanager.kube-prometheus-stack:80
              http_config:
                basic_auth:
                  username: ntfy-alertmanager
                  password_file: /etc/alertmanager/secrets/alertmanager-config-secret/ntfy_password
    alertmanagerSpec:
      secrets:
        - alertmanager-config-secret
      replicas: 1
  grafana:
    enabled: false
  kubeApiServer:
    tlsConfig:
      insecureSkipVerify: true
  kubeControllerManager:
    enabled: false
  kubeEtcd:
    enabled: true
    service:
      selector:
        k8s-app: kube-controller-manager
    serviceMonitor:
      relabelings:
        - sourceLabels: [__meta_kubernetes_pod_node_name]
          separator: ;
          regex: ^(.*)$
          targetLabel: nodename
          replacement: $1
          action: replace
      metricRelabelings:
        - action: labeldrop
          regex: pod
  kubeScheduler:
    enabled: false
  kubeProxy:
    enabled: false
  kubeStateMetrics:
    enabled: true
  nodeExporter:
    operatingSystems:
      darwin:
        enabled: false
  prometheusOperator:
    admissionWebhooks:
      enabled: true
      annotations:
        argocd.argoproj.io/hook: PreSync
        argocd.argoproj.io/hook-delete-policy: HookSucceeded
      patch:
        annotations:
          argocd.argoproj.io/hook: PreSync
          argocd.argoproj.io/hook-delete-policy: HookSucceeded
      mutatingWebhookConfiguration:
        annotations:
          argocd.argoproj.io/hook: PreSync
      validatingWebhookConfiguration:
        annotations:
          argocd.argoproj.io/hook: PreSync
    # namespaces:
    #   releaseNamespace: true
    #   additional:
    #     - kube-system
    #     - kube-prometheus-stack
    #     - argo-workflows
    #     - argocd
    #     - audiobookshelf
    #     - authentik
    #     - blocky
    #     - cert-manager
    #     - cloudnative-pg
    #     - descheduler
    #     - directus
    #     - external-dns
    #     - freshrss
    #     - gatus
    #     - generic-device-plugin
    #     - gitea
    #     - grafana-operator
    #     - harbor
    #     - hoarder
    #     - home-assistant
    #     - immich
    #     - jellystat
    #     - komodo
    #     - lidarr
    #     - linkwarden
    #     - loki
    #     - matrix-synapse
    #     - n8n
    #     - ntfy
    #     - ollama
    #     - outline
    #     - photoview
    #     - postiz
    #     - qbittorrent
    #     - radarr
    #     - radarr-4k
    #     - radarr-anime
    #     - radarr-standup
    #     - reloader
    #     - rook-ceph
    #     - roundcube
    #     - shelly-plug
    #     - slskd
    #     - sonarr
    #     - sonarr-4k
    #     - sonarr-anime
    #     - speedtest-exporter
    #     - spegel
    #     - stalwart
    #     - tdarr
    #     - traefik
    #     - trivy
    #     - unpoller
    #     - vault
    #     - vaultwarden
    #     - volsync
    #     - yamtrack
  prometheus:
    ingress:
      enabled: false
    prometheusSpec:
      scrapeInterval: 30s
      retention: 30d
      externalUrl: https://prometheus.alexlebens.net
      ruleSelectorNilUsesHelmValues: false
      serviceMonitorSelectorNilUsesHelmValues: false
      podMonitorSelectorNilUsesHelmValues: false
      scrapeConfigSelectorNilUsesHelmValues: false
      storageSpec:
        volumeClaimTemplate:
          spec:
            storageClassName: synology-iscsi-delete
            accessModes: ["ReadWriteOnce"]
            resources:
              requests:
                storage: 200Gi
ntfy-alertmanager:
  global:
    fullnameOverride: ntfy-alertmanager
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: xenrox/ntfy-alertmanager
            tag: 0.4.0
            pullPolicy: IfNotPresent
  service:
    main:
      controller: main
      ports:
        http:
          port: 80
          targetPort: 8080
          protocol: HTTP
  persistence:
    config:
      enabled: true
      type: secret
      name: ntfy-alertmanager-config-secret
      advancedMounts:
        main:
          main:
            - path: /etc/ntfy-alertmanager/config
              readOnly: true
              mountPropagation: None
              subPath: config
valkey-ntfy-alertmanager:
  fullnameOverride: ntfy-alertmanager-valkey
  architecture: replication
  auth:
    enabled: false
    usePasswordFiles: false
  primary:
    resources:
      requests:
        cpu: 100m
        memory: 64Mi
    persistence:
      enabled: true
      size: 1Gi
  replica:
    replicaCount: 1
    resources:
      requests:
        cpu: 100m
        memory: 64Mi
    persistence:
      enabled: true
      size: 1Gi