kubernetes = {
  echo = {
    #enabled      = false
    #docker        = true
    image         = "ealen/echo-server:latest"
    service_port  = [4580]
    external_port = true
    service_type  = "NodePort"
    #command       = ["-text=Hello authenticated world!"]
    pvc = {
      echo-config = {
        mount_path = "/app/configs"
      }
      echo-testing = {
        mount_path = "/app/test"
      }
    }
    environment = {
      PORT = {
        value = 4580
      }
      PAPERLESS_REDIS = {
        value = "redis://paperless-redis-svc:6379"
      }
      database = {
        value = "datgg"
      }
    }

  }
  gitea = {
    #enabled = false
    #docker = true
    image        = "gitea/gitea:1.27.0"
    service_port = [3000]
    # no service_port: nginx reaches http://gitea:3000 over deployment_network
    database = {
      image     = "postgres:17"
      mountPath = "/var/lib/postgresql/data"
      host_path = "/data/kubernetes/gitea/gitea-db-data"
    }
    # shared by the gitea and gitea-db containers (the db ignores GITEA__*, gitea ignores POSTGRES_*)
    environment = {
      POSTGRES_USER     = { value = "gitea-KY56Q" }
      POSTGRES_PASSWORD = { value = "Modulator-Yearning-Gills3" }
      POSTGRES_DB       = { value = "gitea-database" }

      GITEA__database__DB_TYPE = { value = "postgres" }
      #GITEA__database__HOST    = { value = "gitea-db:5432" }   # for docker
      GITEA__database__HOST   = { value = "gitea-db-svc:5432" } # for k8s
      GITEA__database__USER   = { value = "gitea-KY56Q" }
      GITEA__database__PASSWD = { value = "Modulator-Yearning-Gills3" }
      GITEA__database__NAME   = { value = "gitea-database" }
    }
    pvc = {
      gitea-data = {
        name       = "gitea-data"
        mount_path = "/data"
        host_path  = "/data/kubernetes/gitea/gitea-data"
      }
      gitea-documents-backup = {
        name       = "gitea-documents-backup"
        mount_path = "/backup"
        host_path  = "/data/kubernetes/gitea/gitea-documents-backup"
      }
    }
  }

  gitea-runner = {
    #enabled = false
    #docker = true
    image               = "gitea/act_runner:latest"
    exposed             = false
    connected_namespace = "gitea"
    environment = {
      GITEA_INSTANCE_URL              = { value = "https://gitea.geeraert.eu/" }
      GITEA_RUNNER_REGISTRATION_TOKEN = { value = "rqi4mFW8LXoc5MhIrUD1rjzdmKVY8n9X14BP6sWd" }
      GITEA_RUNNER_NAME               = { value = "runner" }
      GITEA_RUNNER_LABELS             = { value = "label" }
    }
    pvc = {
      gitea-runner-data = {
        name       = "gitea-runner-data"
        mount_path = "/data"
        host_path  = "/data/kubernetes/gitea/gitea-runner-data"
      }
      docker-sock = {
        name       = "docker-sock"
        mount_path = "/var/run/docker.sock"
        host_path  = "/var/run/docker.sock"
      }
    }
  }





  bitwarden-admin = {
    #enabled        = false
    namespace      = "bitwarden"
    replicas       = 1
    name           = "bitwarden-admin"
    image          = "ghcr.io/bitwarden/admin:2026.1.0"
    extra_manifest = ["../external_manifests/bitwarden/config.configmap.yml", "../external_manifests/bitwarden/global.env.configmap.yml", "../external_manifests/bitwarden/global.override.env.configmap.yml", "../external_manifests/bitwarden/mssql.env.configmap.yml", "../external_manifests/bitwarden/mssql.override.env.configmap.yml", "../external_manifests/bitwarden/uid.env.configmap.yml", "../external_manifests/bitwarden/bitwarden-identity-cert-password.secret.yml"]
    service_port   = [5000]
    exposed        = false
    config_map_ref = ["global.env", "uid.env", "global.override.env"]
    environment    = {}

    pvc = {
      bitwarden-ca-certificates-pvc = {
        mount_path = "/etc/bitwarden/ca-certificates"
      }

      bitwarden-core-pvc = {
        mount_path = "/etc/bitwarden/core"
      }
      bitwarden-logs-pvc = {
        mount_path = "/etc/bitwarden/logs"
        sub_path   = "admin"
      }


    }

  }

  bitwarden-api = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-api"
    image               = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_api:2026.1.0"
    service_port        = [5000]
    exposed             = false
    config_map_ref      = ["global.env", "uid.env", "global.override.env"]
    environment         = {}

    pvc = {
      bitwarden-ca-certificates-pvc = {
        mount_path = "/etc/bitwarden/ca-certificates"
      }

      bitwarden-core-pvc = {
        mount_path = "/etc/bitwarden/core"
      }
      bitwarden-logs-pvc = {
        mount_path = "/etc/bitwarden/logs"
        sub_path   = "api"
      }


    }

  }
  bitwarden-attachments = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-attachments"
    image               = "ghcr.io/bitwarden/attachments:2026.1.0"
    service_port        = [5000]
    exposed             = false
    config_map_ref      = ["global.env", "uid.env"]
    environment         = {}

    pvc = {
      bitwarden-core-pvc = {
        mount_path = "/etc/bitwarden/core/attachments"
        sub_path   = "attachments"
      }

    }
  }
  bitwarden-events = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-events"
    image               = "ghcr.io/bitwarden/events:2026.1.0"
    service_port        = [5000]
    exposed             = false
    config_map_ref      = ["global.env", "uid.env", "global.override.env"]
    environment         = {}

    pvc = {
      bitwarden-ca-certificates-pvc = {
        mount_path = "/etc/bitwarden/ca-certificates"
      }
      bitwarden-logs-pvc = {
        mount_path = "/etc/bitwarden/logs"
        sub_path   = "events"
      }

    }

  }
  bitwarden-icons = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-icons"
    image               = "ghcr.io/bitwarden/icons:2026.1.0"
    service_port        = [5000]
    exposed             = false
    config_map_ref      = ["global.env", "uid.env"]
    environment         = {}

    pvc = {
      bitwarden-ca-certificates-pvc = {
        mount_path = "/etc/bitwarden/ca-certificates"
      }
      bitwarden-logs-pvc = {
        mount_path = "/etc/bitwarden/logs"
        sub_path   = "icons"
      }
    }
  }

  bitwarden-identity = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-identity"
    image               = "gitea.tryton.geeraert.eu/pi-ux-ce/bitbetter_identity:2026.1.0"
    service_port        = [5000]
    exposed             = false
    config_map_ref      = ["global.env", "uid.env", "global.override.env"]
    environment         = {}

    pvc = {
      bitwarden-identity-pvc = {
        mount_path = "/etc/bitwarden/identity"
      }
      bitwarden-ca-certificates-pvc = {
        mount_path = "/etc/bitwarden/ca-certificates"
      }

      bitwarden-core-pvc = {
        mount_path = "/etc/bitwarden/core"
      }
      bitwarden-logs-pvc = {
        mount_path = "/etc/bitwarden/logs"
        sub_path   = "identity"
      }
    }
  }
  bitwarden-mssql = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-mssql"
    image               = "ghcr.io/bitwarden/mssql:2026.1.0"
    service_port        = [1433, 5000]
    exposed             = false
    config_map_ref      = ["mssql.env", "uid.env", "mssql.override.env"]
    environment         = {}
    database = {
      shunt    = "true"
      engine   = "sqlserver"
      username = "sa"
      host     = "bitwarden-mssql-svc"
      name     = "bitwarden_vault"
    }

    pvc = {
      bitwarden-mssql-pvc = {
        mount_path = "/var/opt/mssql/data"
        sub_path   = "data"
      }
      bitwarden-logs-pvc = {
        mount_path = "/etc/bitwarden/logs"
        sub_path   = "mssql"
      }
    }
  }
  bitwarden-nginx = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-nginx"
    image               = "ghcr.io/bitwarden/nginx:2026.1.0"
    service_port        = [8080, 5000, 8443]
    exposed             = true #no need to set as true but I did it for easy access
    legacy_domain       = true
    domain_name         = ["bitwarden"]
    config_map_ref      = ["uid.env"]
    environment         = {}

    pvc = {
      bitwarden-nginx-pvc = {
        mount_path = "/etc/bitwarden/nginx"
      }
      bitwarden-letsencrypt-pvc = {
        mount_path = "/etc/letsencrypt"
      }

      bitwarden-ssl-pvc = {
        mount_path = "/etc/ssl"
      }
      bitwarden-logs-pvc = {
        mount_path = "/var/log/nginx"
        sub_path   = "nginx"
      }
    }
  }
  bitwarden-notifications = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-notifications"
    image               = "ghcr.io/bitwarden/notifications:2026.1.0"
    service_port        = [5000]
    exposed             = false
    config_map_ref      = ["global.env", "uid.env", "global.override.env"]
    environment         = {}

    pvc = {
      bitwarden-ca-certificates-pvc = {
        mount_path = "/etc/bitwarden/ca-certificates"
        name       = "bitwarden-ca-certificates-pvc"
      }
      bitwarden-logs-pvc = {
        mount_path = "/etc/bitwarden/logs"
        sub_path   = "notifications"
      }
    }
  }
  bitwarden-sso = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-sso"
    image               = "ghcr.io/bitwarden/sso:2026.1.0"
    service_port        = [5000]
    exposed             = false
    config_map_ref      = ["global.env", "uid.env", "global.override.env"]
    environment         = {}

    pvc = {
      bitwarden-identity-pvc = {
        mount_path = "/etc/bitwarden/identity"
      }
      bitwarden-core-pvc = {
        mount_path = "/etc/bitwarden/core"
      }
      bitwarden-ca-certificates-pvc = {
        mount_path = "/etc/bitwarden/ca-certificates"
      }
      bitwarden-logs-pvc = {
        mount_path = "/etc/bitwarden/logs"
        sub_path   = "sso"
      }
    }
  }
  bitwarden-web = {
    #enabled             = false
    connected_namespace = "bitwarden"
    replicas            = 1
    name                = "bitwarden-web"
    image               = "ghcr.io/bitwarden/web:2026.1.0"
    service_port        = [5000]
    exposed             = false
    config_map_ref      = ["global.env", "uid.env"]
    environment         = {}

    pvc = {
      bitwarden-web-pvc = {
        mount_path = "/etc/bitwarden/web"
      }
    }
  }

}