# values-development.yaml

#

# When to use: local development on kind / minikube / Docker Desktop, or any

# throwaway cluster where you don't need HA, TLS, or persistence guarantees.

# Minimal resource requests, single replica, no ingress.

#

# Prerequisites: a working kubectl context.

#

# Install:

# helm install sim-dev ./helm/sim \

# --namespace sim-dev --create-namespace \

# --values ./helm/sim/examples/values-development.yaml \

# --set app.env.BETTER_AUTH_SECRET=$(openssl rand -hex 32) \

# --set app.env.ENCRYPTION_KEY=$(openssl rand -hex 32) \

# --set app.env.INTERNAL_API_SECRET=$(openssl rand -hex 32) \

# --set app.env.CRON_SECRET=$(openssl rand -hex 32) \

# --set postgresql.auth.password=$(openssl rand -base64 24 | tr -d '/+=')

# Global configuration

global:

imageRegistry: "ghcr.io"

# Main application

app:

enabled: true

replicaCount: 1

# Resource allocation for development environment

resources:

limits:

memory: "4Gi"

cpu: "2000m"

requests:

memory: "2Gi"

cpu: "1000m"

# Development URLs

env:

NEXT_PUBLIC_APP_URL: "http://localhost:3000"

BETTER_AUTH_URL: "http://localhost:3000"

NEXT_PUBLIC_SOCKET_URL: "http://localhost:3002"

# Example secrets for development (replace with secure values for production)

# For production, generate using: openssl rand -hex 32

BETTER_AUTH_SECRET: "dev-32-char-auth-secret-not-secure-dev"

ENCRYPTION_KEY: "dev-32-char-encryption-key-not-secure"

INTERNAL_API_SECRET: "dev-32-char-internal-secret-not-secure"

CRON_SECRET: "dev-32-char-cron-secret-not-for-prod"

# Optional: API Key Encryption (leave empty for dev, encrypts API keys at rest)

# For production, generate 64-char hex using: openssl rand -hex 32

API_ENCRYPTION_KEY: "" # Optional - if not set, API keys stored in plain text

# Realtime service

realtime:

enabled: true

replicaCount: 1

# Resource allocation for realtime WebSocket service in development

resources:

limits:

memory: "2Gi"

cpu: "1000m"

requests:

memory: "1Gi"

cpu: "500m"

env:

NEXT_PUBLIC_APP_URL: "http://localhost:3000"

BETTER_AUTH_URL: "http://localhost:3000"

BETTER_AUTH_SECRET: "dev-32-char-auth-secret-not-secure-dev"

ALLOWED_ORIGINS: "http://localhost:3000"

# Database migrations

migrations:

enabled: true

# PostgreSQL database

postgresql:

enabled: true

# Simple authentication for development

auth:

username: postgres

password: "postgres"

database: simstudio

# PostgreSQL with pgvector extension for vector operations

image:

repository: pgvector/pgvector

tag: pg17

pullPolicy: IfNotPresent

# Minimal resource allocation for development PostgreSQL

resources:

limits:

memory: "1Gi"

cpu: "500m"

requests:

memory: "512Mi"

cpu: "250m"

# Persistence disabled for easier development (data will be lost on restart)

persistence:

enabled: false

# SSL/TLS disabled for local development

tls:

enabled: false

# Minimal PostgreSQL configuration for development

config:

maxConnections: 100

sharedBuffers: "256MB"

maxWalSize: "1GB"

minWalSize: "80MB"

# Ollama AI models (disabled by default for development)

ollama:

enabled: false

# Ingress (disabled for development - use port-forward for local access)

ingress:

enabled: false

# Pod disruption budget (disabled for development)

podDisruptionBudget:

enabled: false

# Network policies (disabled for development)

networkPolicy:

enabled: false