apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: n8n
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://community-charts.github.io/helm-charts'
    targetRevision: 1.*.*
    chart: n8n    
    helm:
      values: |
        binaryData:
          s3:
            host: "https://sws3.innovation-hub-niedersachsen.de"
            bucketName: "n8n"
            bucketRegion: "eu-west-2"
            accessKey: "WPpTwIoSMgrPChsS3rdS"
            accessSecret: "C59o3EAhsUKBWj1oiPtiYRq3GhLMFeYDeiMxJ4SW"
        db:
          type: "postgresdb"
        main:
          persistence:
            enabled: true
            storageClass: "longhorn"
        webhook:
          autoscaling:
            enabled: true 

        encryptionKey: "MjdjNWNlZDUyOTVlMzZiY2M2ZjU2ZWViYmE1NjFlMDY="

        ingress:
          enabled: true 
          className: "traefik"
          annotations:
            cert-manager.io/cluster-issuer: lets-encrypt
            traefik.ingress.kubernetes.io/router.entrypoints: websecure           
          hosts: 
            - host: "n8n.innovation-hub-niedersachsen.de"
              paths:
                - path: /
                  pathType: Prefix
          tls:
            - secretName: n8n-tls
              hosts:
                - "n8n.innovation-hub-niedersachsen.de"

        redis:
          enabled: true

        postgresql:
          enabled: true
          primary:
            persistence:
              enabled: true
          auth:
            username: "n8n"
            password: "n8n"
            database: "n8n"        

        minio:
          enabled: true
          ingress:
            hosts:
              - "sws3.innovation-hub-niedersachsen.de"    
          users:
            - accessKey: "WPpTwIoSMgrPChsS3rdS"
              secretKey: "C59o3EAhsUKBWj1oiPtiYRq3GhLMFeYDeiMxJ4SW"
              policy: n8n-policy       
          buckets:
            - name: "n8n"
              policy: "none"   
              purge: false
              versioning: false

  destination:
    server: 'https://kubernetes.default.svc'
    namespace: n8n
  syncPolicy:
    managedNamespaceMetadata:
      labels: 
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true