image:
  repository: ghcr.io/anotherstranger/borg-server
  pullPolicy: IfNotPresent
  tag: 2.2.5@sha256:e6745c2be2e2c4154a6a51366d7b66381dfab806ca5be6db7d6929a11e8a5dae

securityContext:
  container:
    readOnlyRootFilesystem: false
    runAsUser: 0
    runAsGroup: 0

service:
  main:
    ports:
      main:
        protocol: tcp
        targetPort: 22
        port: 8022

workload:
  main:
    podSpec:
      containers:
        main:
          env:
            BORG_UID: "{{ .Values.securityContext.container.PUID }}"
            BORG_GID: "{{ .Values.securityContext.pod.fsGroup }}"
          securityContext:
            capabilities:
              add:
                - SYS_CHROOT
                - KILL

persistence:
  borg:
    enabled: true
    mountPath: "/var/lib/docker-borg"
  backups:
    enabled: true
    mountPath: "/home/borg/backups"
  ssh:
    enabled: true
    mountPath: "/home/borg/.ssh"

portal:
  open:
    enabled: false