image:
  repository: ansiblesemaphore/semaphore

config:
  bolt:
    host: # Path to the BoltDB database file
  mysql:
    host: # MySQL database host
    name: # MySQL database (schema) name
    user: # MySQL user name
    pass: # MySQL user's password
  postgres:
    host: # Postgres database host
    name: # Postgres database (schema) name
    user: # Postgres user name
    pass: # Postgres user's password
  dialect: bolt # Can be mysql, postgres or bolt
  port: 3000 # TCP port on which the web interface will be available. Default: 3000
  interface: # Useful if your server has multiple network interfaces
  tmp_path: /tmp/semaphore # Path to directory where cloned repositories and generated files are stored. Default: /tmp/semaphore
  access_key_encryption: # Secret key used for encrypting access keys in database. Read more in [Database encryption reference](https://docs.semaphoreui.com/administration-guide/security#database-encryption).
  web_host: # Can be useful if you want to use Semaphore by the subpath, for example: http://yourdomain.com/semaphore. Do not add a trailing /.
  email_sender:
  email_host:
  email_port:
  email_secure:
  email_username:
  email_password:
  email_alert:
  telegram_alert:
  slack_alert:  # Set to True to enable pushing alerts to slack. It should be used in combination with slack_url
  slack_url: # The slack webhook url. Semaphore will used it to POST Slack formatted json alerts to the provided url
  rocketchat_alert: # Set to True to enable pushing alerts to Rocket.Chat. It should be used in combination with rocketchat_url. Available since v2.9.56.
  rocketchat_url: # The rocketchat webhook url. Semaphore will used it to POST Rocket.Chat formatted json alerts to the provided url. Available since v2.9.56.
  ldap_enable:
  ldap_needtls:
  ldap_binddn:
  ldap_bindpassword:
  ldap_server:
  ldap_searchdn:
  concurrency_mode: # Can be unset/empty or project or node. When set to project, tasks will run in parallel if and only if they do not share the same project id, with no regard to the nodes/hosts that are affected. When set to node, a task will run in parallel if and only if the hosts affected by tasks already running does not intersect with the hosts that would be affected by the task in question. If concurrency_mode is not specified or left empty, no task will start before the previous one has finished.
max_parallel_tasks:
oidc_providers: # OpenID provider settings. You can provide multiple OpenID providers. More about OpenID configuration read in [OpenID](https://docs.semaphoreui.com/administration-guide/openid/).
password_login_disable: false # Disable login with using password. Only LDAP and OpenID.
non_admin_can_create_project: false # Allow non-admin users to create new projects.

service:
  http:
    enabled: true
    ports:
      http:
        port: 80
        targetPort: 3000

volumes:
  - name: config
    secret:
      secretName: ansible-semaphore-config
      optional: false

volumeMounts:
  - name: config
    mountPath: /etc/semaphore
    readOnly: true