# Gitea(SSH) + GitHub(HTTPS トークン) の両対応構成 + Ingress + 事前ビルド image
#
# 実行例:
#   helm upgrade --install claude-code ./claude-code \
#     -n claude-code --create-namespace \
#     -f examples/gitea-and-github.values.yaml \
#     --set anthropic.apiKey="$ANTHROPIC_API_KEY" \
#     --set-file git.identities.gitea-ssh.sshPrivateKey=/path/to/id_claude \
#     --set-file git.identities.gitea-ssh.knownHosts=/path/to/known_hosts \
#     --set git.identities.github-https.token="$GITHUB_PAT"

image:
  session:
    # CI で publish した事前ビルドイメージ（git + ttyd + claude-code 同梱）
    registry: git.cafepieters.com
    repository: helmchart/claude-code/session
    tag: "2.1.259"

auth:
  mode: token
  token:
    existingSecret: claude-code-access      # 事前に kubectl create secret generic で作成

anthropic:
  authMode: apiKey

git:
  allowedHosts:
    - github.com
    - 192.168.9.65
    - git.cafepieters.com
  defaultAuthorName: "Claude"
  defaultAuthorEmail: "claude@cafepieters.com"
  identities:
    gitea-ssh:
      type: ssh
      # sshPrivateKey / knownHosts は --set-file で注入
      # knownHosts は `ssh-keyscan 192.168.9.65` の出力
    github-https:
      type: https-token
      username: "x-access-token"
      # token は --set で注入

session:
  autoStartClaude: true
  idleTimeoutSeconds: 1800
  maxLifetimeSeconds: 28800
  maxSessions: 8
  verifyCommand: "npm test --silent"
  autoPush:
    enabled: true
    branchPrefix: "claude/"

ingress:
  enabled: true
  className: nginx
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
  hosts:
    - host: claude-code.cafepieters.com
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: claude-code-tls
      hosts:
        - claude-code.cafepieters.com