replicaCount: 2

image:
  repository: backend-mln
  tag: helm
  pullPolicy: IfNotPresent

service:
  type: ClusterIP
  port: 8080

resources:
  requests:
    cpu: 100m
    memory: 128Mi
  limits:
    cpu: 500m
    memory: 256Mi

autoscaling:
  enabled: true
  minReplicas: 2
  maxReplicas: 5
  targetCPUUtilizationPercentage: 70

persistence:
  uploads:
    enabled: true
    size: 5Gi
    storageClass: ""
    accessMode: ReadWriteOnce

env:
  DB_HOST: postgres
  DB_PORT: "5432"
  DB_USER: postgres
  DB_NAME: gestion_db
  DB_SSLMODE: disable
  REDIS_HOST: redis
  REDIS_PORT: "6379"
  API_PORT: "8080"
  STORAGE_DRIVER: local
  S3_REGION: us-east-1
  S3_BUCKET: ""
  S3_ENDPOINT: ""
  TELEGRAM_BOT_USERNAME: ""
  LBTELEGRAM_URL: ""
  LBTELEGRAM_BOT1_USERNAME: ""
  LBTELEGRAM_BOT2_USERNAME: ""

# Valeurs sensibles — à surcharger via --set-string ou un Secret Manager externe
secrets:
  DB_PASSWORD: ""
  SESSION_SECRET: ""
  USER_JWT_SECRET: ""
  ADMIN_JWT_SECRET: ""
  REDIS_PASSWORD: ""
  TOMTOM_API_KEY: ""
  TOMTOM_API_KEY_1: ""
  TOMTOM_API_KEY_2: ""
  TOMTOM_API_KEY_3: ""
  TELEGRAM_BOT_TOKEN: ""
  TELEGRAM_WEBHOOK_URL: ""
  TELEGRAM_WEBHOOK_SECRET: ""
  NOWPAYMENTS_API_KEY: ""
  NOWPAYMENTS_IPN_SECRET: ""
  RUSTFS_ACCESS_KEY: ""
  RUSTFS_SECRET_KEY: ""
  BACKEND_LINK_SECRET: ""

podAnnotations: {}

podSecurityContext:
  runAsNonRoot: true
  runAsUser: 101
  runAsGroup: 101
  fsGroup: 101
  seccompProfile:
    type: RuntimeDefault

securityContext:
  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: false
  capabilities:
    drop:
      - ALL