fix: optimize Helm chart for landing page

- Remove duplicate application-credentials.yaml template
- Fix Reflex environment: production -> prod, staging -> dev
- Switch from Nginx to Traefik ingress controller
- Optimize resources for simple landing page (1 replica, minimal CPU/RAM)
- Disable autoscaling and PDB for landing page
- Add registry credentials for hub.peikarband.ir
- Clean up secrets configuration

helm/peikarband/values-production.yaml

@@ -11,19 +11,19 @@ registrySecret:
   enabled: true
   name: hub-registry-secret
   server: hub.peikarband.ir
-  username: "admin"  # Set via ArgoCD UI: Parameters → registrySecret.username
-  password: "5459ed7590d37656410fae38bdf59eb7ee33b68cd4c"  # Set via ArgoCD UI: Parameters → registrySecret.password
+  username: "admin"
+  password: "5459ed7590d37656410fae38bdf59eb7ee33b68cd4c"
 
 imagePullSecrets:
   - name: hub-registry-secret
 
 # Auto-create application secrets (database, redis, etc)
 appSecrets:
-  enabled: true
+  enabled: false  # Set to true if you need database/redis
   name: peikarband-prod-secrets
-  dbUsername: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.dbUsername
-  dbPassword: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.dbPassword
-  redisPassword: "REPLACE_ME"  # Set via ArgoCD UI: Parameters → appSecrets.redisPassword
+  dbUsername: ""
+  dbPassword: ""
+  redisPassword: ""
 
 # Reflex configuration for production
 reflex:
@@ -36,28 +36,28 @@ podAnnotations:
 
 resources:
   limits:
-    cpu: 500m
-    memory: 1Gi
-  requests:
     cpu: 200m
     memory: 256Mi
+  requests:
+    cpu: 50m
+    memory: 128Mi
 
 autoscaling:
   enabled: false
-  minReplicas: 3
-  maxReplicas: 20
-  targetCPUUtilizationPercentage: 60
-  targetMemoryUtilizationPercentage: 70
+  minReplicas: 1
+  maxReplicas: 5
+  targetCPUUtilizationPercentage: 70
+  targetMemoryUtilizationPercentage: 80
 
 ingress:
   enabled: true
-  className: "nginx"
+  className: "traefik"
   annotations:
     cert-manager.io/cluster-issuer: "letsencrypt-prod"
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/rate-limit: "100"
-    nginx.ingress.kubernetes.io/proxy-body-size: "10m"
+    traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+    traefik.ingress.kubernetes.io/router.tls: "true"
+    # Rate limiting and body size should be configured via Traefik Middleware
+    # Example: traefik.ingress.kubernetes.io/router.middlewares: default-ratelimit@kubernetescrd
   hosts:
     - host: peikarband.ir
       paths:
@@ -99,11 +99,11 @@ configMap:
   data:
     APP_NAME: "peikarband"
     LOG_LEVEL: "warning"
-    ENVIRONMENT: "production"
+    ENVIRONMENT: "prod"
 
 podDisruptionBudget:
-  enabled: true
-  minAvailable: 2
+  enabled: false
+  minAvailable: 1
 
 networkPolicy:
   enabled: true