rbac:
  create: true

controller:
  priorityClassName: system-cluster-critical

  extraArgs:
    update-status-on-shutdown: "false"
    tcp-services-configmap: "ingress-nginx/tcp-services"
    udp-services-configmap: "ingress-nginx/udp-services"

  allowSnippetAnnotations: true

  config:
    proxy-buffer-size: 16k
    use-gzip: true
    enable-brotli: true
    hsts-max-age: 31536000
    hsts-preload: true
    disable-ipv6: true
    disable-ipv6-dns: true
    keep-alive-requests: 1000
    use-geoip2: false
    custom-http-errors: 401,403,404,500,501,502,503,504

  extraEnvs:
    - name: TZ
      value: Australia/Sydney

  addHeaders:
    Referrer-Policy: same-origin, strict-origin-when-cross-origin
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block

  ingressClassResource:
    default: true

  service:
    externalTrafficPolicy: Cluster
    ipFamilyPolicy: SingleStack

  metrics:
    enabled: ${metrics_enabled:=false}
  #        serviceMonitor:
  #          enabled: ${metrics_enabled:=false}
  #          scrapeInterval: 1m

  spec:
    template:
      spec:
        containers:
          volumeMounts:
            - mountPath: /etc/nginx/template
              name: nginx-template-volume
              readOnly: true
        volumes:
          - name: nginx-template-volume
            hostPath:
              path: /mnt/nfs/AppData/ingress-nginx/etc/nginx/template
              type: Directory

defaultBackend:
  enabled: true
  image:
    repository: ghcr.io/tarampampam/error-pages
    tag: 2.27.0@sha256:40e2631173b1a407c18fe7d1ba8104d995cf9e4780d123eeadfa1d57c68eaf4f
    pullPolicy: IfNotPresent
  extraEnvs:
    - name: TEMPLATE_NAME
      value: connection
    - name: SHOW_DETAILS
      value: "true"
    - name: READ_BUFFER_SIZE
      value: "8192"