apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: n8n
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://community-charts.github.io/helm-charts'
    targetRevision: 1.*.*
    chart: n8n    
    helm:
      values: |
        db:
          type: "postgresdb"
        postgresql:
          enabled: true
          primary:
            persistence:
              enabled: true

          auth:
            username: "n8n"
            password: "n8n"
            database: "n8n"        

        minio:
          enabled: true
          persistence:
            enabled: true

        webhook:
          url: "https://n8n.innovation-hub-niedersachsen.de"
          allNodes: true

        redis:
          enabled: true
          master:
            persistence:
              enabled: true

        ingress:
          enabled: true 
          className: "traefik"
          annotations:
            cert-manager.io/cluster-issuer: lets-encrypt
            traefik.ingress.kubernetes.io/router.entrypoints: websecure           
          hosts: 
            - host: "n8n.innovation-hub-niedersachsen.de"
              paths:
                - path: /
                  pathType: Prefix
          tls:
            - secretName: n8n-tls
              hosts:
                - "n8n.innovation-hub-niedersachsen.de"

  destination:
    server: 'https://kubernetes.default.svc'
    namespace: n8n
  syncPolicy:
    managedNamespaceMetadata:
      labels: 
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true