release.yaml

apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: tt-rss
spec:
  interval: 5m
  chart:
    spec:
      chart: tt-rss
      version: 6.0.0
      interval: 15m
      sourceRef:
        kind: HelmRepository
        name: angelnu-helm-charts
        namespace: flux-system
  dependsOn:
    - name: tt-rss-db
  #See https://github.com/angelnu/helm-charts/blob/main/charts/apps/tt-rss/values.yaml
  values:
    image:
      repository: ghcr.io/angelnu/tt-rss
      tag: 2.0.9576
      pullPolicy: Always      
    
    ingress:
      main:
        enabled: true
        annotations:
          hajimari.io/enable: "true"
          hajimari.io/icon: rss
          hajimari.io/info: Feed reader
          hajimari.io/group: tools
          nginx.ingress.kubernetes.io/enable-global-auth: "false"
          nginx.ingress.kubernetes.io/proxy-body-size: "8000m"
        hosts:
        - host: rss.${CLUSTER_DOMAIN}
          paths:
          - path: /
            # Ignored if not kubeVersion >= 1.14-0
            pathType: Prefix
        tls:
        - hosts:
          - rss.${CLUSTER_DOMAIN}

    env:
      TTRSS_SELF_URL_PATH: https://rss.${CLUSTER_DOMAIN}/
      TTRSS_DB_HOST: tt-rss-db-zalando-postgres-cluster-postgres
      TTRSS_DB_PORT: "5432"
      TTRSS_DB_USER: postgres
      TTRSS_DB_NAME: tt-rss
      #TTRSS_DB_PASS: set in secret
      TTRSS_SESSION_COOKIE_LIFETIME: "2592000" # 30 days in seconds
      TTRSS_PLUGINS: auth_ldap, note # auth_remote, auth_internal
      
      # LDAP settings
      TTRSS_LDAP_AUTH_SERVER_URI: ldap://ldap.${CLUSTER_DOMAIN}
      #TTRSS_LDAP_AUTH_USETLS: true #It does not work with php8.1
      #TTRSS_LDAP_AUTH_ALLOW_UNTRUSTED_CERT: true
      #TTRSS_LDAP_AUTH_BINDDN: set in secret
      #TTRSS_LDAP_AUTH_BASEDN: set in secret
      #TTRSS_LDAP_AUTH_SEARCHFILTER: set in secret
      TTRSS_LDAP_AUTH_LOGIN_ATTRIB: cn
    
    postgresql:
      enabled: false # use own chart

  valuesFrom:
  - kind: Secret
    name: "tt-rss-helm-values"
    valuesKey: tt-rss.yaml
    optional: false