#
# IMPORTANT NOTE
#
# This chart inherits from our common library chart. You can check the default values/options here:
# https://github.com/bjw-s/helm-charts/blob/a081de5/charts/library/common/values.yaml
#

env:
  # -- Set the container timezone
  TZ: Australia/Sydney

controllers:
  main:
    enabled: true
    type: deployment
    replicas: 1
    containers:
      main:
        image:
          repository: adguard/adguardhome
          tag: v0.107.50
          pullPolicy: IfNotPresent

service:
  # -- Configures settings for the main service.
  # @default -- See [values.yaml](./values.yaml)
  main:
    enabled: true
    controller: main
    ports:
      web-setup:
        enabled: true
        port: 3000
      web-panel:
        enabled: true
        port: 80

  # -- Configures settings for the TCP DNS service.
  # @default -- See [values.yaml](./values.yaml)
  dns-tcp:
    enabled: true
    controller: main
    type: LoadBalancer
    externalTrafficPolicy: Local
    annotations:
      metallb.universe.tf/allow-shared-ip: adguard-home
    ports:
      dns-tcp:
        enabled: true
        port: 53
      dns-over-tls:
        enabled: true
        port: 853
  # -- Configures settings for the UDP DNS service.
  # @default -- See [values.yaml](./values.yaml)
  dns-udp:
    enabled: true
    controller: main
    type: LoadBalancer
    externalTrafficPolicy: Local
    annotations:
      metallb.universe.tf/allow-shared-ip: adguard-home
    ports:
      dns-udp:
        enabled: true
        protocol: UDP
        port: 53
      dns-over-quic:
        enabled: true
        protocol: UDP
        port: 784

ingress:
  # -- Enable and configure ingress settings for the chart under this key.
  # @default -- See [values.yaml](./values.yaml)
  main:
    enabled: false
    # hosts:
    #   - host: chart-example.local
    #     paths:
    #       - path: /
    # tls:
    #   - secretName: chart-example.local
    #     hosts:
    #       - chart-example.local

persistence:
  # -- Configure config persistence settings for the chart under this key.
  # @default -- See [values.yaml](./values.yaml)
  config:
    enabled: true
    type: hostPath
    hostPath: /mnt/nfs/AppData/adguardhome/conf
    hostPathType: DirectoryOrCreate
    # storageClass: ""
    # accessMode: ReadWriteOnce
    # size: 4Gi
  # -- Configure data persistence settings for the chart under this key.
  # @default -- See [values.yaml](./values.yaml)
  data:
    enabled: true
    type: hostPath
    hostPath: /mnt/nfs/AppData/adguardhome/work
    hostPathType: DirectoryOrCreate
    # storageClass: ""
    # accessMode: ReadWriteOnce
    # size: 4Gi

# -- Default AdGuard Home config file.
#    This will only be copied if an existing config does not exist.
#    [[ref]](https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration)
# @default -- See [values.yaml](./values.yaml)
config: |
  bind_host: 0.0.0.0
  bind_port: 80
  users: []
  auth_attempts: 5
  block_auth_min: 15
  http_proxy: ""
  language: ""
  theme: auto
  debug_pprof: false
  web_session_ttl: 720
  dns:
    bind_hosts:
      - 0.0.0.0
    port: 53
    anonymize_client_ip: false
    protection_enabled: true
    blocking_mode: default
    blocking_ipv4: ""
    blocking_ipv6: ""
    blocked_response_ttl: 10
    parental_block_host: family-block.dns.adguard.com
    safebrowsing_block_host: standard-block.dns.adguard.com
    ratelimit: 20
    ratelimit_whitelist: []
    refuse_any: true
    upstream_dns:
      - https://dns10.quad9.net/dns-query
    upstream_dns_file: ""
    bootstrap_dns:
      - 9.9.9.10
      - 149.112.112.10
      - 2620:fe::10
      - 2620:fe::fe:10
    all_servers: false
    fastest_addr: false
    fastest_timeout: 1s
    allowed_clients: []
    disallowed_clients: []
    blocked_hosts:
      - version.bind
      - id.server
      - hostname.bind
    trusted_proxies:
      - 127.0.0.0/8
      - ::1/128
    cache_size: 4194304
    cache_ttl_min: 0
    cache_ttl_max: 0
    cache_optimistic: false
    bogus_nxdomain: []
    aaaa_disabled: false
    enable_dnssec: false
    edns_client_subnet:
      custom_ip: ""
      enabled: false
      use_custom: false
    max_goroutines: 300
    handle_ddr: true
    ipset: []
    ipset_file: ""
    filtering_enabled: true
    filters_update_interval: 24
    parental_enabled: false
    safesearch_enabled: false
    safebrowsing_enabled: false
    safebrowsing_cache_size: 1048576
    safesearch_cache_size: 1048576
    parental_cache_size: 1048576
    cache_time: 30
    rewrites: []
    blocked_services: []
    upstream_timeout: 10s
    private_networks: []
    use_private_ptr_resolvers: true
    local_ptr_upstreams: []
    use_dns64: false
    dns64_prefixes: []
    serve_http3: false
    use_http3_upstreams: false
  tls:
    enabled: false
    server_name: ""
    force_https: false
    port_https: 443
    port_dns_over_tls: 853
    port_dns_over_quic: 853
    port_dnscrypt: 0
    dnscrypt_config_file: ""
    allow_unencrypted_doh: false
    certificate_chain: ""
    private_key: ""
    certificate_path: ""
    private_key_path: ""
    strict_sni_check: false
  querylog:
    enabled: true
    file_enabled: true
    interval: 2160h
    size_memory: 1000
    ignored: []
  statistics:
    enabled: true
    interval: 1
    ignored: []
  filters:
    - enabled: true
      url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt
      name: AdGuard DNS filter
      id: 1
    - enabled: false
      url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_2.txt
      name: AdAway Default Blocklist
      id: 2
  whitelist_filters: []
  user_rules: []
  dhcp:
    enabled: false
    interface_name: ""
    local_domain_name: lan
    dhcpv4:
      gateway_ip: ""
      subnet_mask: ""
      range_start: ""
      range_end: ""
      lease_duration: 86400
      icmp_timeout_msec: 1000
      options: []
    dhcpv6:
      range_start: ""
      lease_duration: 86400
      ra_slaac_only: false
      ra_allow_slaac: false
  clients:
    runtime_sources:
      whois: true
      arp: true
      rdns: true
      dhcp: true
      hosts: true
    persistent: []
  log_file: ""
  log_max_backups: 0
  log_max_size: 100
  log_max_age: 3
  log_compress: false
  log_localtime: false
  verbose: false
  os:
    group: ""
    user: ""
    rlimit_nofile: 0
  schema_version: 17