---
# Non-secret env for the -unkin2 fork. The fork reads Servarr config from
# Prowlarr__<Section>__<Key> env (no config.xml edits, no s6/PUID). Postgres
# wiring points every replica at the same shared DB (arrstack-postgres-rw /
# prowlarr-main); Auth__Method=External defers UI auth to arrproxy/oauth2-proxy;
# Server__UrlBase keeps the /prowlarr prefix so arrproxy path-routing works;
# App__InstanceName is identical across replicas (shared session-cookie name).
# User/Password/ApiKey come from Secrets (see deployment.yaml), not here.
apiVersion: v1
kind: ConfigMap
metadata:
  name: prowlarr-env
  namespace: arrstack
data:
  Prowlarr__Postgres__Host: arrstack-postgres-rw.arrstack.svc.cluster.local
  Prowlarr__Postgres__Port: "5432"
  Prowlarr__Postgres__MainDb: prowlarr-main
  Prowlarr__Log__DbEnabled: "false"
  Prowlarr__Auth__Method: External
  Prowlarr__Auth__Required: DisabledForLocalAddresses
  Prowlarr__App__InstanceName: Prowlarr
  Prowlarr__Server__Port: "9696"
  Prowlarr__Server__UrlBase: /prowlarr
  Prowlarr__Update__Mechanism: External