Add onpier memos

installations/applications/helmfile-badhouseplants.yaml

@@ -51,6 +51,14 @@ releases:
       - template: env-secrets
       - template: ext-database
 
+  - name: app-memos
+    chart: allangers-charts/memos
+    version: 0.2.0
+    namespace: org-onpier
+    inherit:
+      - template: default-env-values
+      - template: ext-database
+
   - name: navidrome
     chart: allangers-charts/navidrome
     namespace: applications

values/badhouseplants/org-onpier/app-memos/values.yaml

@@ -0,0 +1,43 @@
+shortcuts:
+  hostname: notes-onpier.badhouseplants.net
+
+ext-database:
+  enabled: true
+  name: memos-postgres16
+  instance: postgres16
+  credentials:
+    MEMOS_DRIVER: postgres
+    MEMOS_DSN: "{{ .Protocol }}://{{ .Username }}:{{ .Password }}@{{ .Hostname }}:{{ .Port }}/{{ .Database }}?sslmode=disable"
+
+workload:
+  containers:
+    memos:
+      envFrom:
+        - main
+        - secretRef:
+            name: memos-postgres16-creds
+ingress:
+  main:
+    annotations:
+      kubernetes.io/ingress.class: traefik
+      kubernetes.io/tls-acme: "true"
+      kubernetes.io/ingress.allow-http: "false"
+      kubernetes.io/ingress.global-static-ip-name: ""
+      cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+      traefik.ingress.kubernetes.io/router.middlewares: org\-onpier-memosauth@kubernetescrd
+
+ext-secret:
+  enabled: true
+  name: memos-basic-auth
+  data:
+    users: |
+      allanger:$apr1$kNwkQ0S.$9q29sib/xWEp3NDp.tquw/
+
+middleware:
+  enabled: true
+  middlewares:
+    - name: memosauth
+      spec:
+        basicAuth:
+          secret: memos-basic-auth

values/badhouseplants/values.namespaces.yaml

@@ -15,3 +15,4 @@ namespaces:
     labels:
       istio-injection: disabled
   - name: org-badhouseplants
+  - name: org-onpier