replicaCount: 1

image:
  repository: ghcr.io/home-assistant/home-assistant
  pullPolicy: Always
  tag: ""

nameOverride: ""
fullnameOverride: ""
namespaceOverride: ""

hostNetwork: true

timezone: "Europe/Kyiv"

homekit:
  enabled: true
  port: 21063

service:
  type: ClusterIP
  port: 80

ingresses: {}
  # https:
  #   host: ha.example.com
  #   annotations:
  #     traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
  #     traefik.ingress.kubernetes.io/router.tls: "true"
  #     traefik.ingress.kubernetes.io/router.tls.certresolver: letsencrypt
  #     traefik.ingress.kubernetes.io/router.middlewares: traefik-redirect-to-https@kubernetescrd
  #   tls:
  #     - hosts:
  #         - ha.example.com
  # lan:
  #   host: ha.local.lan
  #   annotations:
  #     traefik.ingress.kubernetes.io/router.entrypoints: web

resources:
  requests:
    cpu: "100m"
    memory: "512Mi"
  limits:
    cpu: "8"
    memory: "4Gi"

persistence:
  config:
    enabled: true
    type: pvc
    mountPath: /config
    size: 10Gi
    accessModes:
      - ReadWriteOnce
    storageClass: ""
    # hostPath: /srv/data/home-assistant/config  # only when type: hostPath
  media:
    enabled: true
    type: pvc
    mountPath: /media
    size: 5Gi
    accessModes:
      - ReadWriteOnce
    storageClass: ""
    # hostPath: /srv/data/home-assistant/media  # only when type: hostPath
  backups:
    enabled: false
    type: pvc
    size: 10Gi
    accessModes:
      - ReadWriteOnce
    storageClass: ""

# DEPRECATED: HA core has migrated this entire http: config section
# (server_port, ip_ban_enabled, login_attempts_threshold, use_x_forwarded_for,
# trusted_proxies) out of configuration.yaml. Setting enabled: true now makes
# HA log "The HTTP configuration in configuration.yaml has already been
# migrated and is now being ignored. Please remove the http: block from your
# configuration.yaml." Leave disabled; this section and the init-http
# container will be removed from the chart once appVersion reaches 2027.7.
http:
  enabled: false
  server_port: 8123
  ip_ban_enabled: false
  login_attempts_threshold: 5
  # Pod/service CIDRs and localhost are auto-detected; add extra entries here
  extra_trusted_proxies: []

haSecrets:
  enabled: false
  # K8s Secret containing key-value pairs to write as /config/secrets.yaml
  existingSecret: ""

postgres:
  enabled: false
  host: postgres-tcp.postgres.svc.cluster.local
  port: 5432
  db: homeassistant
  user: ha
  adminUser: postgres
  existingSecret: ""
  passwordKey: HA_POSTGRESQL_PASSWORD
  adminSecret: ""
  adminSecretKey: POSTGRES_ADMIN_PASSWORD
  adminUserKey: ""

dbInit:
  enabled: false
  image: postgres:16-alpine
  resources:
    requests:
      cpu: 50m
      memory: 64Mi
    limits:
      cpu: 100m
      memory: 128Mi

backup:
  enabled: false
  schedule: "0 2 * * *"
  image: postgres:16
  retentionDays: 10
  storagePath: /storage/backups/postgres
  # Node to run backup on (hostname). Overrides global affinity/tolerations.
  node: ""
  persistence:
    enabled: false
    size: 10Gi
    accessModes:
      - ReadWriteOnce
    storageClass: ""
  postgres:
    host: postgres-tcp.postgres.svc.cluster.local
    db: homeassistant
    user: postgres
    existingSecret: ""
    secretKey: password

pvcBackup:
  enabled: false
  schedule: "0 3 * * *"
  image: busybox:latest
  retentionDays: 7
  storagePath: /storage/backups/pvc
  # Node to run backup on (hostname). Overrides global affinity/tolerations.
  node: ""

nodeSelector: {}

tolerations: []

affinity: {}