Upgrade pass.junv.cc to use pocket-id

manifests/passkey-auth.yaml

@@ -1,106 +1,81 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: passkey-auth
+  name: pocket-id
   namespace: argocd
 spec:
   project: default
   source:
-    chart: passkey-auth
-    repoURL: https://wahyd4.github.io/passkey-auth
-    path: passkey-auth
-    targetRevision: 0.1.4
+    chart: pocket-id
+    repoURL: https://anza-labs.github.io/charts
+    targetRevision: 1.7.2
     helm:
-      releaseName: passkey-auth
+      releaseName: pocket-id
       values: |
-        autoscaling:
-          enabled: false
-          maxReplicas: 1
-          minReplicas: 1
-          targetCPUUtilizationPercentage: 70
-        config:
-          auth:
-            allowedEmails:
-            - hi@junv.cc
-            - wahyd4@gmail.com
-            cookieDomain: .junv.cc
-            requireApproval: true
-          cors:
-            allowedOrigins:
-            - https://*.junv.cc
-          webauthn:
-            rpDisplayName: Junv's Home Passkey Auth
-            rpId: pass.junv.cc
-            rpOrigins:
-            - https://pass.junv.cc
-        env:
-        - name: DEFAULT_EMAIL
-          value: hi@junv.cc
-        - name: CONFIG_PATH
-          value: /app/config.yaml
-        - name: ADMIN_EMAIL
-          value: hi@junv.cc
-        healthCheck:
-          enabled: true
-          livenessProbe:
-            failureThreshold: 3
-            initialDelaySeconds: 30
-            periodSeconds: 30
-            timeoutSeconds: 10
-          readinessProbe:
-            failureThreshold: 3
-            initialDelaySeconds: 10
-            periodSeconds: 10
-            timeoutSeconds: 5
-        image:
-          pullPolicy: Always
-          repository: ghcr.io/wahyd4/passkey-auth
-          tag: main
-        imagePullSecrets: {}
-        ingress:
-          annotations:
-            cert-manager.io/cluster-issuer: letsencrypt-prod
-          className: nginx
-          enabled: true
-          hosts:
-          - host: pass.junv.cc
-            paths:
-            - path: /
-              pathType: Prefix
-          tls:
-          - hosts:
-            - pass.junv.cc
-            secretName: pass-junv-cc-tls
-        nodeSelector:
-          kubernetes.io/os: linux
-        persistence:
-          accessMode: ReadWriteOnce
-          enabled: true
-          size: 2Gi
-          storageClass: nfs-client
+        replicaCount: 1
+
+        host: pass.junv.cc
+
+        database:
+          provider: sqlite
+          connectionString: "file:data/pocket-id.db?_pragma=journal_mode(WAL)&_pragma=busy_timeout(2500)&_txlock=immediate"
+
+        pocketID:
+          resources:
+            limits:
+              cpu: 500m
+              memory: 1Gi
+            requests:
+              cpu: 100m
+              memory: 128Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+              - ALL
+            readOnlyRootFilesystem: false
+            runAsNonRoot: true
+            runAsUser: 1000
+
         podSecurityContext:
           fsGroup: 1000
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
-        replicaCount: 1
-        resources:
-          limits:
-            cpu: 500m
-            memory: 1Gi
-          requests:
-            cpu: 200m
-            memory: 256Mi
-        secrets:
-          existingSecret: passkey-auth-secrets
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: false
-          runAsNonRoot: true
-          runAsUser: 1000
+
+        persistence:
+          data:
+            enabled: true
+            existingClaim: pocket-id-local-pvc
+            accessMode: ReadWriteOnce
+
+        ingress:
+          enabled: true
+          className: nginx
+          host: pass.junv.cc
+          paths:
+          - path: /
+            pathType: Prefix
+          annotations:
+            cert-manager.io/cluster-issuer: letsencrypt-prod
+          tls:
+          - secretName: pass-junv-cc-tls
+            hosts:
+            - pass.junv.cc
+
+        nodeSelector:
+          kubernetes.io/os: linux
+
+        config:
+          ui:
+            useDefaults: true
+
+        secret:
+          create: false
+          name: passkey-auth-secrets
+
+        timeZone: Australia/Sydney
+        analyticsDisabled: true
   destination:
     server: https://kubernetes.default.svc
     namespace: nginx-ingress