## Dev overrides — used by DevSpace per-developer deployments
## Secrets come from Doppler via `devspace run sync-secrets`

image:
  registry: registry.digitalocean.com
  repository: gv-shared/specwright
  tag: "" # Set by DevSpace: dev-{user}-{commit}
  pullPolicy: Always

imagePullSecrets:
  - name: devspace-pull-secrets

secrets:
  githubApp:
    existingSecret: specwright-dev-secrets
  anthropic:
    existingSecret: specwright-dev-secrets
  neon:
    existingSecret: specwright-dev-secrets
  gcp:
    existingSecret: specwright-dev-secrets
  auth0:
    existingSecret: specwright-dev-secrets

ingress:
  enabled: true
  className: nginx
  hostname: "" # Set by DevSpace: {user}.specwright.gernerventures.com
  tls: true
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-production

config:
  logLevel: "debug"
  cacheTtlSeconds: 60

cronJob:
  enabled: false

# Relaxed security for dev (editable install needs writable filesystem)
podSecurityContext:
  runAsNonRoot: false
  runAsUser: 0
  runAsGroup: 0
  fsGroup: 0

securityContext:
  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: false
  capabilities:
    drop:
      - ALL

resources:
  limits:
    memory: 512Mi
  requests:
    cpu: 100m
    memory: 128Mi
