infrastructure/clusters/cl01tl/applications/karakeep/values.yaml

karakeep:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: ghcr.io/karakeep-app/karakeep
            tag: 0.28.0
            pullPolicy: IfNotPresent
          env:
            - name: DATA_DIR
              value: /data
            - name: DB_WAL_MODE
              value: true
            - name: NEXTAUTH_URL
              value: https://karakeep.alexlebens.dev/
            - name: NEXTAUTH_SECRET
              valueFrom:
                secretKeyRef:
                  name: karakeep-key-secret
                  key: key
            - name: PROMETHEUS_AUTH_TOKEN
              valueFrom:
                secretKeyRef:
                  name: karakeep-key-secret
                  key: prometheus-token
            - name: ASSET_STORE_S3_ENDPOINT
              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
            - name: ASSET_STORE_S3_REGION
              value: us-east-1
            - name: ASSET_STORE_S3_BUCKET
              valueFrom:
                configMapKeyRef:
                  name: ceph-bucket-karakeep
                  key: BUCKET_NAME
            - name: ASSET_STORE_S3_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
                  name: ceph-bucket-karakeep
                  key: AWS_ACCESS_KEY_ID
            - name: ASSET_STORE_S3_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: ceph-bucket-karakeep
                  key: AWS_SECRET_ACCESS_KEY
            - name: ASSET_STORE_S3_FORCE_PATH_STYLE
              value: true
            - name: MEILI_ADDR
              value: http://karakeep-meilisearch.karakeep:7700
            - name: MEILI_MASTER_KEY
              valueFrom:
                secretKeyRef:
                  name: karakeep-meilisearch-master-key-secret
                  key: MEILI_MASTER_KEY
            - name: BROWSER_WEB_URL
              value: http://karakeep.karakeep:9222
            - name: DISABLE_SIGNUPS
              value: false
            - name: OAUTH_PROVIDER_NAME
              value: "Authentik"
            - name: OAUTH_WELLKNOWN_URL
              value: https://auth.alexlebens.dev/application/o/karakeep/.well-known/openid-configuration
            - name: OAUTH_SCOPE
              value: "openid email profile"
            - name: OAUTH_CLIENT_ID
              valueFrom:
                secretKeyRef:
                  name: karakeep-oidc-secret
                  key: AUTHENTIK_CLIENT_ID
            - name: OAUTH_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: karakeep-oidc-secret
                  key: AUTHENTIK_CLIENT_SECRET
            - name: OLLAMA_BASE_URL
              value: http://ollama-server-3.ollama:11434
            - name: OLLAMA_KEEP_ALIVE
              value: 5m
            - name: INFERENCE_TEXT_MODEL
              value: gemma3:4b
            - name: INFERENCE_IMAGE_MODEL
              value: granite3.2-vision:2b
            - name: EMBEDDING_TEXT_MODEL
              value: mxbai-embed-large
            - name: INFERENCE_JOB_TIMEOUT_SEC
              value: 720
          resources:
            requests:
              cpu: 10m
              memory: 256Mi
        chrome:
          image:
            repository: gcr.io/zenika-hub/alpine-chrome
            tag: 124
            pullPolicy: IfNotPresent
          args:
            - --no-sandbox
            - --disable-gpu
            - --disable-dev-shm-usage
            - --remote-debugging-address=0.0.0.0
            - --remote-debugging-port=9222
            - --hide-scrollbars
          resources:
            requests:
              cpu: 10m
              memory: 128Mi
  service:
    main:
      controller: main
      ports:
        http:
          port: 3000
          targetPort: 3000
          protocol: HTTP
        chrome:
          port: 9222
          targetPort: 9222
          protocol: HTTP
  persistence:
    data:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 10Gi
      retain: true
      advancedMounts:
        main:
          main:
            - path: /data
              readOnly: false
meilisearch:
  environment:
    MEILI_NO_ANALYTICS: true
    MEILI_ENV: production
    MEILI_EXPERIMENTAL_DUMPLESS_UPGRADE: true
  auth:
    existingMasterKeySecret: karakeep-meilisearch-master-key-secret
  service:
    type: ClusterIP
    port: 7700
  persistence:
    enabled: true
    storageClass: ceph-block
    size: 10Gi
  resources:
    requests:
      cpu: 10m
      memory: 128Mi
  serviceMonitor:
    enabled: true
cloudflared:
  existingSecretName: karakeep-cloudflared-secret