# OdooSky v3 instance-template-v3 — default values.
#
# Per-tenant overlay repos override only the keys that differ from these
# defaults. Keep this file as the single source of truth for what an
# Odoo instance looks like by default; do not duplicate defaults in the
# overlay schema or in Tower-Go.

instance:
  # Short slug used in K8s object names + as the Helm release name.
  # Must be DNS-safe (lowercase, no underscores, <= 40 chars).
  code: demo
  # The full HTTPS hostname this instance answers on.
  # Tenants live under *.tenants.odoosky.org (covered by wildcard DNS A).
  domain: demo.tenants.odoosky.org

odoo:
  image: odoo
  tag: "18.0"
  # Filestore PVC size (Odoo's /var/lib/odoo).
  filestoreSize: 10Gi
  resources:
    requests:
      memory: 512Mi
      cpu: 250m
    limits:
      memory: 2Gi
      cpu: "2"

postgres:
  image: postgres
  tag: "16-alpine"
  user: odoo
  database: postgres
  # If empty, the chart auto-generates on first install and re-reads
  # the existing Secret on subsequent upgrades (lookup pattern).
  password: ""
  storage: 10Gi
  resources:
    requests:
      memory: 256Mi
      cpu: 100m
    limits:
      memory: 1Gi
      cpu: "1"

ingress:
  # Traefik entrypoint name (set on the Traefik install in the
  # `traefik` namespace).
  entryPoint: websecure
  # The pre-provisioned wildcard cert for *.tenants.odoosky.org —
  # one Certificate resource issued ONCE in the chart's release
  # namespace, then every instance's IngressRoute references the
  # resulting Secret. Avoids Let's Encrypt's per-week certificate
  # issuance ceiling (50/week/registered-domain) as we scale to
  # many tenants.
  #
  # See infrastructure/cluster/wildcard-cert.yaml for the
  # provisioning manifest.
  tlsSecret: tenants-wildcard-tls