ext-secret:
  enabled: true
  name: loki-basic-auth
  data:
    users: |
      loki:$apr1$YmrcEKi7$9SdBV36OV1ZT0NdppklWf/
middleware:
  enabled: true
  middlewares:
    - name: lokiauth
      spec:
        basicAuth:
          secret: loki-basic-auth

global:
  dnsService: "coredns"
deploymentMode: SingleBinary
loki:
  commonConfig:
    replication_factor: 1
  storage:
    type: 'filesystem'
  schemaConfig:
    configs:
      - from: "2024-01-01"
        store: tsdb
        index:
          prefix: loki_index_
          period: 24h
        object_store: filesystem # we're storing on filesystem so there's no real persistence here.
        schema: v13
  memcached:
    chunk_cache:
      enabled: false
      host: chunk-cache-memcached.loki.svc
      service: memcached-client
      batch_size: 256
      parallelism: 10
    results_cache:
      enabled: false
      host: results-cache-memcached.loki.svc
      service: memcached-client
      default_validity: 12h
singleBinary:
  replicas: 1
read:
  replicas: 0
backend:
  replicas: 0
write:
  replicas: 0
chunksCache:
  enabled: false
ingester:
  replicas: 0
querier:
  replicas: 0
queryFrontend:
  replicas: 0
queryScheduler:
  replicas: 0
distributor:
  replicas: 0
compactor:
  replicas: 0
indexGateway:
  replicas: 0
bloomCompactor:
  replicas: 0
bloomGateway:
  replicas: 0
ingress:
  enabled: true
  ingressClassName: traefik
  annotations:
    kubernetes.io/tls-acme: "true"
    kubernetes.io/ingress.allow-http: "false"
    kubernetes.io/ingress.global-static-ip-name: ""
    cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
    external-dns.alpha.kubernetes.io/ingress-hostname-source: defined-hosts-only
    traefik.ingress.kubernetes.io/router.middlewares: observability-lokiauth@kubernetescrd
  hosts:
    - loki.badhouseplants.net
  tls:
    - secretName: loki.badhouseplants.net
      hosts:
        - loki.badhouseplants.net