replicaCount: 2

image:
  repository: backend-mln
  tag: helm
  pullPolicy: IfNotPresent

service:
  type: ClusterIP
  port: 8080

resources:
  requests:
    cpu: 100m
    memory: 128Mi
  limits:
    cpu: 500m
    memory: 256Mi

autoscaling:
  enabled: true
  minReplicas: 2
  maxReplicas: 5
  targetCPUUtilizationPercentage: 70

persistence:
  uploads:
    enabled: true
    size: 5Gi
    storageClass: ""
    accessMode: ReadWriteOnce

env:
  DB_HOST: postgres
  DB_PORT: "5432"
  DB_USER: postgres
  DB_NAME: gestion_db
  DB_SSLMODE: disable
  REDIS_HOST: redis
  REDIS_PORT: "6379"
  API_PORT: "8080"

# Valeurs sensibles — à surcharger via --set-string ou un Secret Manager externe
secrets:
  DB_PASSWORD: ""
  SESSION_SECRET: ""
  USER_JWT_SECRET: ""
  USER_JWT_SECRET_OLD: ""
  ADMIN_JWT_SECRET: ""
  ADMIN_JWT_SECRET_OLD: ""
  REDIS_PASSWORD: ""
  TOMTOM_API_KEY: ""
  TELEGRAM_WEBHOOK_URL: ""
  TELEGRAM_WEBHOOK_SECRET: ""
  NOWPAYMENTS_IPN_SECRET: ""

podAnnotations: {}

podSecurityContext:
  runAsNonRoot: true
  runAsUser: 101
  runAsGroup: 101
  fsGroup: 101

securityContext:
  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: false
  capabilities:
    drop:
      - ALL