#
# IMPORTANT NOTE
#
# This chart inherits from our common library chart. You can check the default values/options here:
# https://github.com/k8s-at-home/library-charts/tree/main/charts/stable/common/values.yaml
#

# Copy the configmap to the AdGuardHome conf directory
# Do NOT overwrite when the file already exists
initContainers:
- name: copy-configmap
  image: busybox
  command:
  - "sh"
  - "-c"
  - |
    if [ ! -f /opt/adguardhome/conf/AdGuardHome.yaml ]; then
      mkdir -p /opt/adguardhome/conf
      cp /tmp/AdGuardHome.yaml /opt/adguardhome/conf/AdGuardHome.yaml
    fi
  volumeMounts:
  - name: adguard-home-config
    mountPath: /tmp/AdGuardHome.yaml
    subPath: AdGuardHome.yaml
  - name: config
    mountPath: /opt/adguardhome/conf
  securityContext:
    runAsUser: 0

image:
  repository: adguard/adguardhome
  tag: v0.105.2
  pullPolicy: IfNotPresent

strategy:
  type: Recreate

env: {}
  # TZ:

args:
- "--config"
- "/opt/adguardhome/conf/AdGuardHome.yaml"
- "--no-check-update"

# -- (int) Number of pods to load balance between
replicas: 1

service:
  port:
    port: 3000
  # additionalServices:
  # - enabled: true
  #   nameSuffix: dns-tcp
  #   type: NodePort
  #   port:
  #     port: 53
  #     name: dns-tcp
  #     protocol: TCP
  #     targetPort: 53
  #   externalTrafficPolicy: Local
  # - enabled: true
  #   nameSuffix: dns-udp
  #   type: NodePort
  #   port:
  #     port: 53
  #     name: dns-udp
  #     protocol: UDP
  #     targetPort: 53
  #   externalTrafficPolicy: Local

persistence:
  config:
    enabled: true
    emptyDir:
      enabled: true
    mountPath: /opt/adguardhome/conf
  data:
    enabled: false
    emptyDir:
      enabled: false
    mountPath: /opt/adguardhome/work
    ## Persistent Volume Storage Class
    ## If defined, storageClassName: <storageClass>
    ## If set to "-", storageClassName: "", which disables dynamic provisioning
    ## If undefined (the default) or set to null, no storageClassName spec is
    ##   set, choosing the default provisioner.  (gp2 on AWS, standard on
    ##   GKE, AWS & OpenStack)
    # storageClass: "-"
    # accessMode: ReadWriteOnce
    # size: 1Gi
    ## Do not delete the pvc upon helm uninstall
    # skipuninstall: false
    # existingClaim: ""

prometheus:
  serviceMonitor:
    enabled: false
    interval: 30s
    additionalLabels: {}

# podAnnotations:
#   prometheus.io/scrape: "true"
#   prometheus.io/port: "api"

# -- Full list of options https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration
# @default -- see URL to default config
config: |
  bind_host: 0.0.0.0
  bind_port: 3000
  beta_bind_port: 0
  users: []
  http_proxy: ""
  language: en
  rlimit_nofile: 0
  debug_pprof: false
  web_session_ttl: 720
  dns:
    bind_host: 0.0.0.0
    port: 53
    statistics_interval: 1
    querylog_enabled: true
    querylog_file_enabled: true
    querylog_interval: 90
    querylog_size_memory: 1000
    anonymize_client_ip: false
    protection_enabled: true
    blocking_mode: default
    blocking_ipv4: ""
    blocking_ipv6: ""
    blocked_response_ttl: 10
    parental_block_host: family-block.dns.adguard.com
    safebrowsing_block_host: standard-block.dns.adguard.com
    ratelimit: 0
    ratelimit_whitelist: []
    refuse_any: true
    upstream_dns:
    - https://dns10.quad9.net/dns-query
    upstream_dns_file: ""
    bootstrap_dns:
    - 9.9.9.10
    - 149.112.112.10
    - 2620:fe::10
    - 2620:fe::fe:10
    all_servers: false
    fastest_addr: false
    allowed_clients: []
    disallowed_clients: []
    blocked_hosts: []
    cache_size: 4194304
    cache_ttl_min: 0
    cache_ttl_max: 0
    bogus_nxdomain: []
    aaaa_disabled: false
    enable_dnssec: false
    edns_client_subnet: false
    max_goroutines: 300
    ipset: []
    filtering_enabled: true
    filters_update_interval: 24
    parental_enabled: false
    safesearch_enabled: false
    safebrowsing_enabled: false
    safebrowsing_cache_size: 1048576
    safesearch_cache_size: 1048576
    parental_cache_size: 1048576
    cache_time: 30
    rewrites: []
    blocked_services: []
    customresolver: null
  tls:
    enabled: false
    server_name: ""
    force_https: false
    port_https: 443
    port_dns_over_tls: 853
    port_dns_over_quic: 784
    port_dnscrypt: 0
    dnscrypt_config_file: ""
    allow_unencrypted_doh: false
    strict_sni_check: false
    certificate_chain: ""
    private_key: ""
    certificate_path: ""
    private_key_path: ""
  filters:
  - enabled: true
    url: https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt
    name: AdGuard DNS filter
    id: 1
  - enabled: false
    url: https://adaway.org/hosts.txt
    name: AdAway
    id: 2
  - enabled: false
    url: https://www.malwaredomainlist.com/hostslist/hosts.txt
    name: MalwareDomainList.com Hosts List
    id: 4
  whitelist_filters: []
  user_rules: []
  dhcp:
    enabled: false
    interface_name: ""
    dhcpv4:
      gateway_ip: ""
      subnet_mask: ""
      range_start: ""
      range_end: ""
      lease_duration: 86400
      icmp_timeout_msec: 1000
      options: []
    dhcpv6:
      range_start: ""
      lease_duration: 86400
      ra_slaac_only: false
      ra_allow_slaac: false
  clients: []
  log_compress: false
  log_localtime: false
  log_max_backups: 0
  log_max_size: 100
  log_max_age: 3
  log_file: ""
  verbose: false
  schema_version: 7