helmrelease.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: ascii-movie
  namespace: ascii-movie
spec:
  chart:
    spec:
      chart: ascii-movie
      version: 0.16.3
      reconcileStrategy: ChartVersion
      sourceRef:
        kind: HelmRepository
        namespace: flux-system
        name: gabe565
  interval: 1h
  driftDetection:
    mode: enabled
  valuesFrom:
    - kind: Secret
      name: ascii-movie-values
  values:
    env:
      TZ: America/Chicago
      ASCII_MOVIE_CONCURRENT_STREAMS: "5"

    podLabels:
      policy.gabe565.com/ingress-prometheus: "true"
      policy.gabe565.com/ingress-world: "true"

    ingress:
      main:
        enabled: true
        annotations:
          nginx.ingress.kubernetes.io/temporal-redirect: https://github.com/gabe565/ascii-movie
        hosts:
          - host: starwarstel.net
            paths: &paths
              - path: /
          - host: "*.starwarstel.net"
            paths: *paths
          - host: movie.gabe565.com
            paths: *paths
        tls: &tls
          - secretName: starwarstel.net-tls
            hosts:
              - starwarstel.net
              - "*.starwarstel.net"
          - secretName: gabe565.com-tls
            hosts:
              - movie.gabe565.com
      health:
        enabled: true
        hosts:
          - host: starwarstel.net
            paths:
              - path: /health
                service:
                  name: ascii-movie-api
                  port: 1977
            pathType: Exact
        tls: *tls

    securityContext:
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
      capabilities: { drop: [ALL] }

    podSecurityContext:
      runAsNonRoot: true
      seccompProfile: { type: RuntimeDefault }

    service:
      main:
        ipFamilyPolicy: PreferDualStack

    serviceMonitor:
      main:
        enabled: true