---
# Non-secret env for the -unkin2 fork. The fork reads Servarr config from
# Radarr__<Section>__<Key> env (no config.xml edits, no s6/PUID). Postgres wiring
# points every replica at the same shared DB (arrstack-postgres-rw / radarr-main);
# Auth__Method=External defers UI auth to arrproxy/oauth2-proxy; Server__UrlBase
# keeps the /radarr prefix so arrproxy path-routing works; App__InstanceName is
# identical across replicas (shared session-cookie name). User/Password/ApiKey
# come from Secrets (see deployment.yaml), not here.
apiVersion: v1
kind: ConfigMap
metadata:
  name: radarr-env
  namespace: arrstack
data:
  Radarr__Postgres__Host: arrstack-postgres-rw.arrstack.svc.cluster.local
  Radarr__Postgres__Port: "5432"
  Radarr__Postgres__MainDb: radarr-main
  Radarr__Log__DbEnabled: "false"
  Radarr__Auth__Method: External
  Radarr__Auth__Required: DisabledForLocalAddresses
  Radarr__App__InstanceName: Radarr
  Radarr__Server__Port: "7878"
  Radarr__Server__UrlBase: /radarr
  Radarr__Update__Mechanism: External
  # Shared arrstack Valkey (valkey-operator). Setting Host is what activates the
  # fork's #14 Redis features (SignalR backplane, cross-replica cache-invalidation
  # bus, distributed rate limiter): RedisOptions.IsConfigured gates purely on a
  # non-empty Host, so there is no separate Enabled flag. The operator leaves the
  # default user passwordless (jellyfin parity), so no Password/Ssl is wired.
  # Channels/keys are namespaced by this fork's radarr:ratelimit: prefix, so the
  # one cluster is safe to share with sonarr/prowlarr.
  Radarr__Redis__Host: valkey-arrstack-valkey.arrstack.svc.cluster.local
  Radarr__Redis__Port: "6379"