nodeSelector:
  kubernetes.io/hostname: master.tail2fe2d.ts.net

db:
  type: postgresdb

main:
  resources:
    requests:
      cpu: 100m
      memory: 128Mi
    limits:
      cpu: 512m
      memory: 512Mi
  persistence:
    enabled: true
    existingClaim: n8n-home
    mountPath: /home/node/.n8n

podSecurityContext:
  fsGroup: 1000
  fsGroupChangePolicy: "OnRootMismatch"

# Fix NFS permission issues - required for NFS volumes
initContainers:
  - name: fix-permissions
    image: busybox:1.35
    command:
      - sh
      - -c  
      - |
        echo "Fixing permissions for NFS volume..."
        if [ ! -d "/home/node/.n8n" ]; then
          mkdir -p /home/node/.n8n
        fi
        chown -R 1000:1000 /home/node/.n8n
        chmod -R 775 /home/node/.n8n
        echo "Permissions fixed: $(ls -ld /home/node/.n8n)"
    volumeMounts:
      - name: node-modules  
        mountPath: /home/node/.n8n
    securityContext:
      runAsUser: 0
      runAsGroup: 0

worker:
  mode: regular

webhook:
  url: https://n8n.hexor.cy

redis:
  enabled: true

existingEncryptionKeySecret: credentials

externalPostgresql:
  existingSecret: credentials
  host: "psql.psql.svc"
  username: "n8n"
  database: "n8n"

ingress:
  enabled: true
  className: traefik
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt
    traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd

  hosts:
    - host: n8n.hexor.cy
      paths:
        - path: /
          pathType: Prefix
  tls:
    - secretName: n8n-tls
      hosts:
        - '*.hexor.cy'