## Harbor values to REPLACE registry.abrban.com
## Ingress controller on this cluster is Traefik (k3s).
##
## Install:
##   helm upgrade --install harbor harbor/harbor -n cloudhost -f backend/helm/cloudhost-harbor/values-registry.abrban.com.yaml
##
externalURL: https://registry.abrban.com

proxy:
  # Values are injected by install script from `cloudhost/registry-egress-proxy`.
  httpProxy: ""
  httpsProxy: ""
  noProxy: ""

expose:
  type: ingress
  tls:
    enabled: true
    certSource: secret
    secret:
      secretName: abrban-wildcard-tls
  ingress:
    className: traefik
    hosts:
      core: registry.abrban.com
    annotations:
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
      # Increase timeouts for large pushes (skopeo/registry blobs)
      traefik.ingress.kubernetes.io/router.tls: "true"

# Disable components we don't need for now to reduce resources
trivy:
  enabled: false
notary:
  enabled: false
chartmuseum:
  enabled: false

# Single-node staging: keep resource usage modest
core:
  replicas: 1
jobservice:
  replicas: 1
registry:
  replicas: 1

persistence:
  enabled: true
  persistentVolumeClaim:
    # Use existing default storage (local-path) until Ceph is ready.
    # After Ceph, switch to rook-ceph-block for Harbor's PVCs.
    registry:
      storageClass: local-path
      size: 50Gi
    jobservice:
      storageClass: local-path
      size: 5Gi
    database:
      storageClass: local-path
      size: 10Gi
    redis:
      storageClass: local-path
      size: 5Gi

database:
  type: internal

redis:
  type: internal

portal:
  replicas: 1

# We will create proxy-cache projects after install (todo: configure-proxy-cache)