k8scd/actual-budget/helm-actual-budget.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: helm-actual-budget
  namespace: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: actual-budget
    server: https://kubernetes.default.svc
  project: default
  source:
    repoURL: https://community-charts.github.io/helm-charts
    targetRevision: 1.8.7
    chart: actualbudget
    helm:
      values: |
        # Actual Budget configuration

        image:
          tag: "26.3.0"

        # Service configuration
        service:
          type: ClusterIP
          port: 5006

        # Ingress configuration
        ingress:
          enabled: true
          className: nginx
          annotations:
            cert-manager.io/cluster-issuer: prod-cluster-issuer
            nginx.ingress.kubernetes.io/proxy-body-size: 50m
            nginx.ingress.kubernetes.io/auth-url: |-
              http://authentik-server.authentik.svc.cluster.local/outpost.goauthentik.io/auth/nginx
            nginx.ingress.kubernetes.io/auth-signin: |-
              https://authentik.rubenhensen.nl/outpost.goauthentik.io/start?rd=$scheme%3A%2F%2F$host$escaped_request_uri
            nginx.ingress.kubernetes.io/auth-response-headers: |-
              Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-entitlements,X-authentik-email,X-authentik-name,X-authentik-uid
            nginx.ingress.kubernetes.io/auth-snippet: |-
              proxy_set_header X-Forwarded-Host $http_host;
          hosts:
            - host: ynab.rubenhensen.nl
              paths:
                - path: /
                  pathType: Prefix
          tls:
            - secretName: actual-budget-tls
              hosts:
                - ynab.rubenhensen.nl

        # Persistence configuration
        persistence:
          enabled: true
          storageClass: longhorn
          size: 10Gi
          accessModes:
            - ReadWriteOnce

        # Resource limits
        resources:
          requests:
            memory: "256Mi"
            cpu: "100m"
          limits:
            memory: "512Mi"
            cpu: "500m"

  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    automated:
      selfHeal: true
      prune: true