# values-development.yaml
#
# When to use: local development on kind / minikube / Docker Desktop, or any
# throwaway cluster where you don't need HA, TLS, or persistence guarantees.
# Minimal resource requests, single replica, no ingress.
#
# Prerequisites: a working kubectl context.
#
# Install:
#   helm install sim-dev ./helm/sim \
#     --namespace sim-dev --create-namespace \
#     --values ./helm/sim/examples/values-development.yaml \
#     --set app.env.BETTER_AUTH_SECRET=$(openssl rand -hex 32) \
#     --set app.env.ENCRYPTION_KEY=$(openssl rand -hex 32) \
#     --set app.env.INTERNAL_API_SECRET=$(openssl rand -hex 32) \
#     --set app.env.CRON_SECRET=$(openssl rand -hex 32) \
#     --set postgresql.auth.password=$(openssl rand -base64 24 | tr -d '/+=')

# Global configuration
global:
  imageRegistry: "ghcr.io"

# Main application
app:
  enabled: true
  replicaCount: 1
  
  # Resource allocation for development environment
  resources:
    limits:
      memory: "4Gi"
      cpu: "2000m"
    requests:
      memory: "2Gi"
      cpu: "1000m"
  
  # Development URLs
  env:
    NEXT_PUBLIC_APP_URL: "http://localhost:3000"
    BETTER_AUTH_URL: "http://localhost:3000"
    NEXT_PUBLIC_SOCKET_URL: "http://localhost:3002"
    
    # Example secrets for development (replace with secure values for production)
    # For production, generate using: openssl rand -hex 32
    BETTER_AUTH_SECRET: "dev-32-char-auth-secret-not-secure-dev"
    ENCRYPTION_KEY: "dev-32-char-encryption-key-not-secure"
    INTERNAL_API_SECRET: "dev-32-char-internal-secret-not-secure"
    CRON_SECRET: "dev-32-char-cron-secret-not-for-prod"

    # Optional: API Key Encryption (leave empty for dev, encrypts API keys at rest)
    # For production, generate 64-char hex using: openssl rand -hex 32
    API_ENCRYPTION_KEY: ""  # Optional - if not set, API keys stored in plain text

# Realtime service
realtime:
  enabled: true
  replicaCount: 1
  
  # Resource allocation for realtime WebSocket service in development
  resources:
    limits:
      memory: "2Gi"
      cpu: "1000m"
    requests:
      memory: "1Gi"
      cpu: "500m"
  
  env:
    NEXT_PUBLIC_APP_URL: "http://localhost:3000"
    BETTER_AUTH_URL: "http://localhost:3000"
    BETTER_AUTH_SECRET: "dev-32-char-auth-secret-not-secure-dev"
    ALLOWED_ORIGINS: "http://localhost:3000"

# Database migrations
migrations:
  enabled: true

# PostgreSQL database
postgresql:
  enabled: true
  
  # Simple authentication for development
  auth:
    username: postgres
    password: "postgres"
    database: simstudio
  
  # PostgreSQL with pgvector extension for vector operations
  image:
    repository: pgvector/pgvector
    tag: pg17
    pullPolicy: IfNotPresent
  
  # Minimal resource allocation for development PostgreSQL
  resources:
    limits:
      memory: "1Gi"
      cpu: "500m"
    requests:
      memory: "512Mi"
      cpu: "250m"
  
  # Persistence disabled for easier development (data will be lost on restart)
  persistence:
    enabled: false
  
  # SSL/TLS disabled for local development
  tls:
    enabled: false
  
  # Minimal PostgreSQL configuration for development
  config:
    maxConnections: 100
    sharedBuffers: "256MB"
    maxWalSize: "1GB"
    minWalSize: "80MB"

# Ollama AI models (disabled by default for development)
ollama:
  enabled: false

# Ingress (disabled for development - use port-forward for local access)
ingress:
  enabled: false

# Pod disruption budget (disabled for development)
podDisruptionBudget:
  enabled: false

# Network policies (disabled for development)
networkPolicy:
  enabled: false