headscale_argocd_app.yaml

---
# has to be after secrets, but before web-app
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: headscale-server
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: "2"
spec:
  project: default
  destination:
    server: 'https://kubernetes.default.svc'
    namespace: headscale
  source:
    repoURL: 'https://charts.gabe565.com'
    chart: headscale
    targetRevision: 0.15.0
    helm:
      values: |
        env:
          HEADSCALE_DNS_CONFIG_BASE_DOMAIN: buildstars.local
          TZ: Europe/Amsterdam
          # HEADSCALE_OIDC_ISSUER: ""
          # HEADSCALE_OIDC_CLIENT_ID: ""
          # HEADSCALE_OIDC_CLIENT_SECRET: ""

        sidecars:
          ui:
            image: ghcr.io/gurucomputing/headscale-ui:latest
            ports:
              - name: http
                containerPort: 80

        service:
          main:
            ports:
              ui:
                port: 80

        ingress:
          main:
            enabled: true
            annotations:
              kubernetes.io/ingress.class: nginx
              cert-manager.io/cluster-issuer: letsencrypt-develop
              nginx.ingress.kubernetes.io/rewrite-target: /
            tls:
              - hosts:
                  - headscale.buildstars.online
                secretName: headscale-tls
            rules:
            - host: headscale.buildstars.online
              http:
                paths:
                - path: /
                  pathType: Prefix

        persistence:
          # -- Configure persistence settings for the chart under this key.
          # @default -- See [values.yaml](./values.yaml)
          config:
            enabled: true
            mountPath: /etc/headscale
            retain: true
            storageClass: "local-path"
            accessMode: ReadWriteOnce
            size: 1Gi

        postgresql:
          enabled: false
          auth:
            database: headscale
            postgresPassword: changeme
          primary:
            persistence:
              enabled: false
              # storageClass: ""
              # size: 8Gi
        
        serviceMonitor:
          main:
            # -- Enables or disables the serviceMonitor.
            enabled: false
            # -- Configures the endpoints for the serviceMonitor.
            # @default -- See [values.yaml](./values.yaml)
            endpoints:
              - port: metrics
                scheme: http
                path: /metrics
                interval: 30s
                scrapeTimeout: 10s
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
      - Replace=false
    automated:
      selfHeal: false
      prune: true