From 794ee79e85c8dc23b251c86fdaa19c6180f49b82 Mon Sep 17 00:00:00 2001
From: Nikolai Rodionov <nikolai.rodionov@onpier.de>
Date: Tue, 4 Mar 2025 13:56:51 +0100
Subject: [PATCH] Add onpier memos

---
 .../applications/helmfile-badhouseplants.yaml |  8 ++++
 .../org-onpier/app-memos/values.yaml          | 43 +++++++++++++++++++
 values/badhouseplants/values.namespaces.yaml  |  1 +
 3 files changed, 52 insertions(+)
 create mode 100644 values/badhouseplants/org-onpier/app-memos/values.yaml

diff --git a/installations/applications/helmfile-badhouseplants.yaml b/installations/applications/helmfile-badhouseplants.yaml
index 7883c48..21e9171 100644
--- a/installations/applications/helmfile-badhouseplants.yaml
+++ b/installations/applications/helmfile-badhouseplants.yaml
@@ -51,6 +51,14 @@ releases:
       - template: env-secrets
       - template: ext-database
 
+  - name: app-memos
+    chart: allangers-charts/memos
+    version: 0.2.0
+    namespace: org-onpier
+    inherit:
+      - template: default-env-values
+      - template: ext-database
+
   - name: navidrome
     chart: allangers-charts/navidrome
     namespace: applications
diff --git a/values/badhouseplants/org-onpier/app-memos/values.yaml b/values/badhouseplants/org-onpier/app-memos/values.yaml
new file mode 100644
index 0000000..2c0d12d
--- /dev/null
+++ b/values/badhouseplants/org-onpier/app-memos/values.yaml
@@ -0,0 +1,43 @@
+shortcuts:
+  hostname: notes-onpier.badhouseplants.net
+
+ext-database:
+  enabled: true
+  name: memos-postgres16
+  instance: postgres16
+  credentials:
+    MEMOS_DRIVER: postgres
+    MEMOS_DSN: "{{ .Protocol }}://{{ .Username }}:{{ .Password }}@{{ .Hostname }}:{{ .Port }}/{{ .Database }}?sslmode=disable"
+
+workload:
+  containers:
+    memos:
+      envFrom:
+        - main
+        - secretRef:
+            name: memos-postgres16-creds
+ingress:
+  main:
+    annotations:
+      kubernetes.io/ingress.class: traefik
+      kubernetes.io/tls-acme: "true"
+      kubernetes.io/ingress.allow-http: "false"
+      kubernetes.io/ingress.global-static-ip-name: ""
+      cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+      traefik.ingress.kubernetes.io/router.middlewares: org\-onpier-memosauth@kubernetescrd
+
+ext-secret:
+  enabled: true
+  name: memos-basic-auth
+  data:
+    users: |
+      allanger:$apr1$kNwkQ0S.$9q29sib/xWEp3NDp.tquw/
+
+middleware:
+  enabled: true
+  middlewares:
+    - name: memosauth
+      spec:
+        basicAuth:
+          secret: memos-basic-auth
diff --git a/values/badhouseplants/values.namespaces.yaml b/values/badhouseplants/values.namespaces.yaml
index 350c064..4e1a2c6 100644
--- a/values/badhouseplants/values.namespaces.yaml
+++ b/values/badhouseplants/values.namespaces.yaml
@@ -15,3 +15,4 @@ namespaces:
     labels:
       istio-injection: disabled
   - name: org-badhouseplants
+  - name: org-onpier