apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: mattermost
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  project: default
  source:
    repoURL: 'https://helm.mattermost.com'
    targetRevision: 6.6.85
    chart: mattermost-team-edition
    helm:
      valuesObject:
        # Ingress Configuration
        ingress:
          enabled: true
          hosts:
            - mattermost.innovation-hub-niedersachsen.de
          tls:
            - hosts:
                - mattermost.innovation-hub-niedersachsen.de
              secretName: mattermost-tls
          annotations:
            kubernetes.io/ingress.class: traefik
            traefik.ingress.kubernetes.io/router.tls: "true"
            traefik.ingress.kubernetes.io/router.middlewares: default-http-redirect@kubernetescrd
            cert-manager.io/cluster-issuer: lets-encrypt
        
        # MySQL Database Configuration
        mysql:
          enabled: true
          mysqlRootPassword: "InnoHubMYSQL_2025!"
          mysqlUser: "mmdbuser"
          mysqlPassword: "mmdbpwd"
          mysqlDatabase: "mattermost"
        
        # Disable External Database
        externalDB:
          enabled: false
        
        # Mattermost Configuration - WICHTIG: Ohne DataSource!
        configJSON:
          ServiceSettings:
            SiteURL: "https://mattermost.innovation-hub-niedersachsen.de"
            ListenAddress: ":8065"
          SqlSettings:
            DriverName: "mysql"
            # DataSource wird automatisch vom Chart generiert - NICHT manuell setzen!
  
  destination:
    server: 'https://kubernetes.default.svc'
    namespace: mattermost
  
  syncPolicy:
    managedNamespaceMetadata:
      labels: 
        pod-security.kubernetes.io/enforce: "privileged"
    automated:
      selfHeal: true
      prune: true
    syncOptions:
      - CreateNamespace=true