values.yaml

# Default values for static-webhost.
# This is a YAML-formatted file.

nameOverride: ""
fullnameOverride: ""

# Persistent storage shared (RWX) between the code-server editor and the caddy webserver.
storage:
  # Size of the shared volume.
  size: 10Gi
  # accessModes left fixed at ReadWriteMany; storageClassName intentionally unset
  # so the cluster default RWX provisioner is used.

# Hostnames exposed via the IngressRoute. All domains route to Caddy unauthenticated;
# the first domain additionally exposes /admin → code-server behind OIDC.
domains:
  - example.gewis.nl

# OIDC auth via traefik-oidc-auth plugin. "CBC - Application Hosting Team (ADM)"
# always has access (hardcoded in templates/middleware.yaml); any groups listed
# here are additionally allowed in.
oidc:
  groups: []
  provider:
    url: https://auth.gewis.nl/realms/GEWISWG
    clientId: traefik-auth
    validAudience: traefik-auth
  scopes:
    - openid
    - profile
    - email
  # The actual secret values are reflected in from shared-secrets/oidc-auth
  # by emberstack reflector; this chart only mirrors the empty Secret shell.
  secretReflectsFrom: shared-secrets/oidc-auth

# Default landing page seeded into an empty volume on first deploy.
# The seed init container writes index.html and a .initialized sentinel; once
# the sentinel exists it's a no-op, so user edits via code-server survive
# subsequent rollouts.
defaultPage:
  logoUrl: https://github.com/GEWIS.png

# code-server (VS Code in the browser) — edits the shared volume.
codeServer:
  image:
    repository: codercom/code-server
    tag: latest
    pullPolicy: IfNotPresent
  resources: {}
  # Extensions pre-installed by an init container into a per-pod emptyDir.
  # The marketplace UI is disabled at runtime (EXTENSIONS_GALLERY={}), so the
  # user can only run what we ship here.
  extensions:
    - bmewburn.vscode-intelephense-client
    - dbaeumer.vscode-eslint
    - esbenp.prettier-vscode
  # VS Code user settings rendered into settings.json. Defaults enforce dark
  # theme, no AI/telemetry, and silence extension recommendations/auto-update.
  # Override or add keys here.
  settings:
    workbench.colorTheme: Default Dark Modern
    telemetry.telemetryLevel: "off"
    chat.commandCenter.enabled: false
    chat.agent.enabled: false
    chat.editing.enabled: false
    inlineChat.enabled: false
    workbench.welcomePage.walkthroughs.openOnInstall: false
    extensions.autoUpdate: false
    extensions.autoCheckUpdates: false
    extensions.ignoreRecommendations: true

# Caddy — serves the shared volume as static files.
caddy:
  image:
    repository: caddy
    tag: 2-alpine
    pullPolicy: IfNotPresent
  resources: {}