apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: n8n
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://community-charts.github.io/helm-charts'
    targetRevision: 1.*.*
    chart: n8n    
    helm:
      values: |
        encryptionKey: "239fbfe8315c786826a9af8f6f984e46"
        
        # n8n Hauptknoten mit Persistenz
        main:
          persistence:
            enabled: true
            storageClass: "longhorn"
            size: 10Gi
            accessMode: ReadWriteOnce
            mountPath: "/home/node/.n8n"
            annotations:
              helm.sh/resource-policy: keep
          forceToUseStatefulset: true
          count: 1
          
          # Umgebungsvariablen für Trust Proxy
          extraEnvVars:
            N8N_PROXY_HOPS: "1"
        
        # PostgreSQL Datenbank
        db:
          type: "postgresdb"
        postgresql:
          enabled: true
          primary:
            persistence:
              enabled: true
              storageClass: "longhorn"
              size: 10Gi
              accessMode: ReadWriteOnce
              annotations:
                helm.sh/resource-policy: keep
          auth:
            username: "n8n"
            password: "n8n"
            postgresPassword: "35PuQG99qi"
            database: "n8n"
        
        # MinIO für Binary Data
        minio:
          enabled: true
          rootUser: "vkYCY4YJsFv11E18az7o"
          rootPassword: "gOVBJMs5qxABhReVQwe3M43mfS8RsejUJSKOWr5N"
          persistence:
            enabled: true
            storageClass: "longhorn"
            size: 40Gi
            annotations:
              helm.sh/resource-policy: keep

        # Redis für Queue Mode
        redis:
          enabled: true
          auth:
            password: "y8GBnBTleK"
          master:
            persistence:
              enabled: true
              storageClass: "longhorn"
              size: 5Gi
              accessMode: ReadWriteOnce
              annotations:
                helm.sh/resource-policy: keep

        webhook:
          url: "https://n8n.innovation-hub-niedersachsen.de/"
          allNodes: true

        ingress:
          enabled: true 
          className: "traefik"
          annotations:
            kubernetes.io/ingress.class: traefik
            traefik.ingress.kubernetes.io/router.tls: "true"
            cert-manager.io/cluster-issuer: lets-encrypt
            traefik.ingress.kubernetes.io/router.entrypoints: websecure           
          hosts: 
            - host: "n8n.innovation-hub-niedersachsen.de"
              paths:
                - path: /
                  pathType: "Prefix"
          tls:
            - secretName: "n8n-tls"
              hosts:
                - "n8n.innovation-hub-niedersachsen.de"

  destination:
    server: 'https://kubernetes.default.svc'
    namespace: n8n
  syncPolicy:
    managedNamespaceMetadata:
      labels: 
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true