clusterDomain: ai.hexor.cy

extraEnvVars:
  GLOBAL_LOG_LEVEL: debug
  OAUTH_PROVIDER_NAME: authentik
  OPENID_PROVIDER_URL: https://idm.hexor.cy/application/o/openwebui/.well-known/openid-configuration
  OPENID_REDIRECT_URI: https://ai.hexor.cy/oauth/oidc/callback
  WEBUI_URL: https://ai.hexor.cy
  # Allows auto-creation of new users using OAuth. Must be paired with ENABLE_LOGIN_FORM=false.
  ENABLE_OAUTH_SIGNUP: true
  # Disables user/password login form. Required when ENABLE_OAUTH_SIGNUP=true.
  ENABLE_LOGIN_FORM: false
  OAUTH_MERGE_ACCOUNTS_BY_EMAIL: true

extraEnvFrom:
  - secretRef:
      name: oidc-secret
nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net
ollamaUrls:
  - http://ollama.ollama.svc:11434
ollama:
  enabled: false
  ollama:
    gpu:
      enabled: false
    models:
      pull:
        - qwen3-vl:8b
      run:
        - qwen3-vl:8b
        
pipelines:
  enabled: true
  
tika:
  enabled: true
  
websocket:
  enabled: true

ingress:
    enabled: true
    class: traefik
    annotations:
      cert-manager.io/cluster-issuer: letsencrypt
      traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
    host: "ai.hexor.cy"
    tls:
      - hosts:
          - '*.hexor.cy'
        secretName: ollama-tls