config:
  jetstream:
    enabled: true
    fileStore:
      enabled: true
      maxSize: 2G
      pvc:
        enabled: true
        size: 2Gi
        storageClassName: localpv-zfs-ceph
    memoryStore:
      enabled: true
      maxSize: 64M
  nats:
    tls:
      enabled: true
      secretName: nats-server-tls
  merge:
    system_account: SYS
    accounts:
      SYS:
        users:
          - user: sys
            password: "<< $NATS_SYS_PASSWORD >>"
      CI:
        jetstream:
          # Account limits are JSON-encoded by config.merge. Use explicit byte
          # counts so NATS receives integers rather than quoted size strings.
          max_memory: 33554432
          max_file: 1073741824
          max_streams: 16
          max_consumers: 64
          max_bytes_required: true
        users:
          - user: ci-producer
            password: "<< $NATS_CI_PRODUCER_PASSWORD >>"
            permissions:
              publish:
                allow: [ci.runner.>, $JS.API.>]
              subscribe:
                allow: [_INBOX.>]
          - user: ci-worker
            password: "<< $NATS_CI_WORKER_PASSWORD >>"
            permissions:
              publish:
                allow: [$JS.API.>, $JS.ACK.>]
              subscribe:
                allow: [_INBOX.>]

container:
  env:
    NATS_SYS_PASSWORD:
      valueFrom:
        secretKeyRef: {name: nats-auth, key: sys_password}
    NATS_CI_PRODUCER_PASSWORD:
      valueFrom:
        secretKeyRef: {name: nats-auth, key: ci_producer_password}
    NATS_CI_WORKER_PASSWORD:
      valueFrom:
        secretKeyRef: {name: nats-auth, key: ci_worker_password}
  resources:
    requests: {cpu: 25m, memory: 64Mi}
    limits: {memory: 192Mi}

natsBox:
  enabled: false

promExporter:
  enabled: true
  podMonitor:
    enabled: true

service:
  merge:
    spec:
      type: LoadBalancer