# Enable API & Dashboard
api:
  dashboard: true
  insecure: true

# Define ports
ports:
  web:
    port: 8000
    exposedPort: 80
  websecure:
    port: 8443
    exposedPort: 443

# Enable SafeNaming and allow cross-namespace routing
providers:
  kubernetesCRD:
    allowCrossNamespace: true

# If you want to enable the dashboard via IngressRoute
ingressRoute:
  dashboard:
    enabled: true

# Traefik static arguments for HTTP->HTTPS redirect & Let's Encrypt DNS-01 (Cloudflare)
additionalArguments:
  - "--providers.kubernetescrd.safenaming=true"
  - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
  - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
  - "--certificatesresolvers.letsencrypt.acme.dnschallenge=true"
  - "--certificatesresolvers.letsencrypt.acme.dnschallenge.provider=cloudflare"
  - "--certificatesresolvers.letsencrypt.acme.email=admin@cudanet.org"
  - "--certificatesresolvers.letsencrypt.acme.storage=/data/acme.json"

env:
  - name: CF_DNS_API_TOKEN
    value: "<changeme>"

# Match existing 128Mi size to satisfy immutability checks
persistence:
  enabled: true
  path: /data
  size: 1Gi