apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: tailscale-derp-hk
  namespace: infra-net
spec:
  interval: 30m
  chart:
    spec:
      chart: tailscale-derp
      version: 0.0.9
      sourceRef:
        kind: HelmRepository
        name: devcm-repo
        namespace: infra-gitops
      interval: 12h
  values:
    image:
      tag: v1.94.1
    hostNetwork: true
    extraVolumes:
      - name: cert-volume
        secret:
          secretName: dev-cm-crt
          items:
            - key: tls.key
              path: tchk.node.dev.cm.key
            - key: tls.crt
              path: tchk.node.dev.cm.crt
    extraVolumeMounts:
      - name: cert-volume
        mountPath: /certs
    derp:
      hostname: "tchk.node.dev.cm"
      verify_clients: true
      http_port: -1
      https_port: 30443
      stun_port: 33478
      certdir: /certs