#apiVersion: argoproj.io/v1alpha1
#kind: Application
#metadata:
#  name: openproject
#  finalizers:
#  - resources-finalizer.argocd.argoproj.io
#spec:
#  project: default
#  source:
#    repoURL: 'https://charts.openproject.org'
#    chart: openproject
#    targetRevision: 11.*.*
#    helm:
#      values: |
#        develop: false
#        #env:
#        #  - name: EMAIL_DELIVERY_METHOD
#        #    value: "smtp"
#        #  - name: SMTP_ADDRESS
#        #    value: smtp://192.168.4.125:25?ignoreTLS=true&tls={rejectUnauthorized:false}&secure=false
#        #  - name: SMTP_PORT
#        #    value: "25"
#        #  - name: SMTP_DOMAIN
#        #    value: "innovation-hub-niedersachsen.de"      
#        ingress:
#          enabled: true
#          ingressClassName: traefik
#          annotations: 
#            kubernetes.io/ingress.class: traefik
#            traefik.ingress.kubernetes.io/router.entrypoints: websecure
#            traefik.ingress.kubernetes.io/router.tls: "true"
#            cert-manager.io/cluster-issuer: lets-encrypt-staging
#          host: "openproject.innovation-hub-niedersachsen.de"
#          path: /
#          pathType: "Prefix"
#          tls:
#            enabled: true
#            secretName: openproject-tls
#              # hosts:
#              #   - openproject.innovation-hub-niedersachsen.de
#        openproject:
#          https: true
#          hsts: true
#          seed_locale: "en"
#          useTmpVolumes: "false"
#          ## Define admin user details
#          # only applicable on first installation
#          # c.f. https://www.openproject.org/docs/installation-and-operations/configuration/#initial-admin-user-creation
#          admin_user:
#            password: "InnoHubADMIN_2025!"
#            password_reset: "false"
#            name: "OpenProject Admin"
#            mail: "inno-netz@innovation-hub-niedersachsen.de"
#        ## Configure PostgreSQL settings.
#        #
#        persistence:
#          enabled: false
#          accessModes: 
#            - "ReadWriteOnce"
#        s3:
#          enabled: true
#          auth:
#            accessKeyId: "K7mNpQ2vRxL9wYtH3Zc8"
#            secretAccessKey: "jX9fK2mP5nQ8rT1vW4yZ7bN0cM3hL6gF9dS2aE5k"
#            host: "https://sws3.innovation-hub-niedersachsen.de"
#            port: 443
#        postgresql:
#          bundled: true
#          auth:
#            # username: "openproject"
#            # database: "openproject"
#            # password: "InnoProjectDB_2025"
#            # postgresPassword: "InnoHubPostgres_2025"
#            existingSecret: "postgresql-secret"
#            secretKeys:
#              adminPasswordKey: "InnoHubPostgres_2025"
#              userPasswordKey: "InnoProjectDB_2025"
#          # options:
#          #  pool:
#          #    maxConnections: 30
#          #    minConnections: 20
#          #    connectionTimeoutMillis: 20000
#          #    idleTimeoutMillis: 100000
#          #    maxLifetimeMillis: 6000000    
#  destination:
#    server: 'https://kubernetes.default.svc'
#    namespace: openproject
#  syncPolicy:
#    managedNamespaceMetadata:
#      labels: 
#        pod-security.kubernetes.io/enforce: "privileged"
#    automated:
#      selfHeal: true
#      prune: true
#    syncOptions:
#      - CreateNamespace=true