# Production-specific values for peikarband
# This file overrides default values.yaml for production

replicaCount: 3

image:
  pullPolicy: Always

podAnnotations:
  prometheus.io/scrape: "true"
  prometheus.io/port: "8000"
  prometheus.io/path: "/metrics"

resources:
  limits:
    cpu: 2000m
    memory: 2Gi
  requests:
    cpu: 500m
    memory: 1Gi

autoscaling:
  enabled: true
  minReplicas: 3
  maxReplicas: 20
  targetCPUUtilizationPercentage: 60
  targetMemoryUtilizationPercentage: 70

ingress:
  enabled: true
  className: "nginx"
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt-prod"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
    nginx.ingress.kubernetes.io/rate-limit: "100"
    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
  hosts:
    - host: peikarband.ir
      paths:
        - path: /
          pathType: Prefix
    - host: www.peikarband.ir
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: peikarband-tls
      hosts:
        - peikarband.ir
        - www.peikarband.ir

postgresql:
  enabled: true
  external:
    host: "postgres-prod.default.svc.cluster.local"
    port: "5432"
    database: "peikarband_prod"
    usernameSecret:
      name: "peikarband-prod-secrets"
      key: "db-username"
    passwordSecret:
      name: "peikarband-prod-secrets"
      key: "db-password"

redis:
  enabled: true
  external:
    host: "redis-prod.default.svc.cluster.local"
    port: "6379"
    passwordSecret:
      name: "peikarband-prod-secrets"
      key: "redis-password"

configMap:
  data:
    APP_NAME: "peikarband"
    LOG_LEVEL: "warning"
    ENVIRONMENT: "production"

podDisruptionBudget:
  enabled: true
  minAvailable: 2

networkPolicy:
  enabled: true

monitoring:
  serviceMonitor:
    enabled: true
    interval: 30s
    scrapeTimeout: 10s

