vaultwarden helm

No introduction found. Create it?

More popular helm chart found

vaultwarden from bjw-s-labs is more popular with 13 repositories.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/helm/app-template
helm install vaultwarden app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 12)

NameRepoStarsVersionTimestamp
vaultwardendrag0n141/home-ops404.1.26 days ago
vaultwardenauricom/home-ops1933.7.322 days ago
vaultwardenishioni/homelab-ops1354.1.2a month ago

Values

See the most popular values for this chart:

KeyTypes
controllers.vaultwarden.containers.app.env.DOMAIN (11)
https://vault.${SECRET_DOMAIN}
string
controllers.vaultwarden.containers.app.env.SIGNUPS_ALLOWED (10)
false
boolean, string
controllers.vaultwarden.containers.app.env.TZ (9)
${TIMEZONE}
string
controllers.vaultwarden.containers.app.env.DATA_FOLDER (7)
data
string
controllers.vaultwarden.containers.app.env.SMTP_FROM (7)
vaultwarden@${SECRET_DOMAIN}
string
controllers.vaultwarden.containers.app.env.SMTP_SECURITY (7)
off
string
controllers.vaultwarden.containers.app.env.SMTP_FROM_NAME (6)
Vaultwarden
string
controllers.vaultwarden.containers.app.env.SMTP_HOST (6)
smtp-relay.network.svc.cluster.local
string
controllers.vaultwarden.containers.app.env.SMTP_PORT (6)
2525
number, string
controllers.vaultwarden.containers.app.env.ATTACHMENTS_FOLDER (5)
data/attachments
string
controllers.vaultwarden.containers.app.env.ICON_CACHE_FOLDER (5)
data/icon_cache
string
controllers.vaultwarden.containers.app.env.WEBSOCKET_ENABLED (4)
true
boolean, string
controllers.vaultwarden.containers.app.env.PUSH_ENABLED (3)
true
string, boolean
controllers.vaultwarden.containers.app.env.SHOW_PASSWORD_HINT (3)
false
boolean, string
controllers.vaultwarden.containers.app.env.WEBSOCKET_ADDRESS (3)
0.0.0.0
string
controllers.vaultwarden.containers.app.env.WEBSOCKET_PORT (3)
3012
number
controllers.vaultwarden.containers.app.env.INVITATION_ORG_NAME (2)
${PUBLIC_DOMAIN}
string
controllers.vaultwarden.containers.app.env.ADMIN_TOKEN (1)
${admin_token}
string
controllers.vaultwarden.containers.app.env.DATABASE_URL.secretKeyRef.key (1)
uri
string
controllers.vaultwarden.containers.app.env.DATABASE_URL.secretKeyRef.name (1)
postgresql-app
string
controllers.vaultwarden.containers.app.env.DATABASE_URL (1)
postgresql://vaultwarden@vaultwarden-postgres-17-rw.security.svc:5432/vaultwarden?sslrootcert=/certs/postgres/serving/ca.crt&sslcert=/certs/postgres/user/tls.crt&sslkey=/certs/postgres/user/tls.key&sslmode=verify-full
string
controllers.vaultwarden.containers.app.env.DISABLE_ADMIN_TOKEN (1)
false
boolean
controllers.vaultwarden.containers.app.env.EMAIL_2FA_AUTO_FALLBACK (1)
true
string
controllers.vaultwarden.containers.app.env.EMAIL_CHANGE_ALLOWED (1)
true
string
controllers.vaultwarden.containers.app.env.ENABLE_WEBSOCKET (1)
true
string
controllers.vaultwarden.containers.app.env.EXPERIMENTAL_CLIENT_FEATURE_FLAGS (1)
ssh-key-vault-item,ssh-agent
string
controllers.vaultwarden.containers.app.env.ICON_SERVICE (1)
duckduckgo
string
controllers.vaultwarden.containers.app.env.INVITATIONS_ALLOWED (1)
true
string
controllers.vaultwarden.containers.app.env.IP_HEADER (1)
X-Forwarded-For
string
controllers.vaultwarden.containers.app.env.LOGIN_RATELIMIT_MAX_BURST (1)
2
string
controllers.vaultwarden.containers.app.env.ORG_ATTACHMENT_LIMIT (1)
1000000
string
controllers.vaultwarden.containers.app.env.PUSH_INSTALLATION_ID (1)
${push_installation_id}
string
controllers.vaultwarden.containers.app.env.PUSH_INSTALLATION_KEY (1)
${push_installation_key}
string
controllers.vaultwarden.containers.app.env.ROCKET_PORT (1)
8080
string
controllers.vaultwarden.containers.app.env.SENDS_ALLOWED (1)
true
boolean
controllers.vaultwarden.containers.app.env.SIGNUPS_VERIFY (1)
true
string
controllers.vaultwarden.containers.app.env.SMTP_EXPLICIT_TLS (1)
true
string
controllers.vaultwarden.containers.app.env.SMTP_SSL (1)
true
string
controllers.vaultwarden.containers.app.env.SMTP_TIMEOUT (1)
15
number
controllers.vaultwarden.containers.app.env.SSO_AUTHORITY (1)
https://auth.${PUBLIC_DOMAIN}/application/o/vaultwarden/
string
controllers.vaultwarden.containers.app.env.SSO_ENABLED (1)
true
string
controllers.vaultwarden.containers.app.env.SSO_ONLY (1)
true
string
controllers.vaultwarden.containers.app.env.SSO_SCOPES (1)
email profile offline_access
string
controllers.vaultwarden.containers.app.env.TEMPLATES_FOLDER (1)
data/templates
string
controllers.vaultwarden.containers.app.env.TIMEZONE (1)
${TZ}
string
controllers.vaultwarden.containers.app.env.TRASH_AUTO_DELETE_DAYS (1)
30
string
controllers.vaultwarden.containers.app.env.USER_ATTACHMENT_LIMIT (1)
1000000
string
controllers.vaultwarden.containers.app.env.USER_SEND_LIMIT (1)
1000000
string
controllers.vaultwarden.containers.app.image.repository (11)
vaultwarden/server
string
controllers.vaultwarden.containers.app.image.tag (11)
1.34.1@sha256:48267ea14d8649b2e553a5fe290c40b5dd94d54e9a24b26ae7134a75a659695f
string
controllers.vaultwarden.containers.app.envFrom[].secretRef.name (10)
vaultwarden-secret
string
controllers.vaultwarden.containers.app.resources.limits.memory (9)
256Mi
string
controllers.vaultwarden.containers.app.resources.requests.cpu (9)
100m
string
controllers.vaultwarden.containers.app.resources.requests.memory (9)
100Mi
string
controllers.vaultwarden.containers.app.securityContext.allowPrivilegeEscalation (6)
false
boolean
controllers.vaultwarden.containers.app.securityContext.capabilities.drop[] (6)
- ALL
string
controllers.vaultwarden.containers.app.securityContext.readOnlyRootFilesystem (6)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.enabled (4)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.custom (2)
true
boolean
controllers.vaultwarden.containers.app.probes.liveness.spec.failureThreshold (2)
3
number
controllers.vaultwarden.containers.app.probes.liveness.spec.httpGet.path (2)
/alive
string
controllers.vaultwarden.containers.app.probes.liveness.spec.httpGet.port (2)
80
number
controllers.vaultwarden.containers.app.probes.liveness.spec.initialDelaySeconds (2)
0
number
controllers.vaultwarden.containers.app.probes.liveness.spec.periodSeconds (2)
10
number
controllers.vaultwarden.containers.app.probes.liveness.spec.timeoutSeconds (2)
1
number
controllers.vaultwarden.containers.app.probes.liveness.path (1)
/health
string
controllers.vaultwarden.containers.app.probes.readiness.enabled (4)
true
boolean
controllers.vaultwarden.containers.app.probes.readiness.custom (2)
true
boolean
controllers.vaultwarden.containers.app.probes.readiness.spec.failureThreshold (2)
3
number
controllers.vaultwarden.containers.app.probes.readiness.spec.httpGet.path (2)
/alive
string
controllers.vaultwarden.containers.app.probes.readiness.spec.httpGet.port (2)
80
number
controllers.vaultwarden.containers.app.probes.readiness.spec.initialDelaySeconds (2)
0
number
controllers.vaultwarden.containers.app.probes.readiness.spec.periodSeconds (2)
10
number
controllers.vaultwarden.containers.app.probes.readiness.spec.timeoutSeconds (2)
1
number
controllers.vaultwarden.containers.app.probes.readiness.path (1)
/health
string
controllers.vaultwarden.containers.app.probes.startup.enabled (2)
true
boolean
controllers.vaultwarden.containers.app.probes.startup.spec.failureThreshold (1)
30
number
controllers.vaultwarden.containers.app.probes.startup.spec.periodSeconds (1)
5
number
controllers.vaultwarden.containers.app.ports[].containerPort (1)
80
number
controllers.vaultwarden.containers.app.ports[].name (1)
http
string
controllers.vaultwarden.annotations."reloader.stakater.com/auto" (8)
true
string
controllers.vaultwarden.annotations."secret.reloader.stakater.com/reload" (2)
vaultwarden-db-secret
string
controllers.vaultwarden.pod.securityContext.fsGroup (5)
1000
number
controllers.vaultwarden.pod.securityContext.fsGroupChangePolicy (5)
OnRootMismatch
string
controllers.vaultwarden.pod.securityContext.runAsGroup (5)
1000
number
controllers.vaultwarden.pod.securityContext.runAsUser (5)
1000
number
controllers.vaultwarden.pod.securityContext.runAsNonRoot (3)
true
boolean
controllers.vaultwarden.pod.securityContext.seccompProfile.type (3)
RuntimeDefault
string
controllers.vaultwarden.pod.labels."endpoints.netpols.home.arpa/email-sender" (1)
true
string
controllers.vaultwarden.pod.labels."policy.gabe565.com/egress-namespace" (1)
true
string
controllers.vaultwarden.pod.labels."policy.gabe565.com/egress-world" (1)
true
string
controllers.vaultwarden.pod.labels."policy.gabe565.com/ingress-nginx" (1)
true
string
controllers.vaultwarden.pod.priorityClassName (1)
system-cluster-critical
string
controllers.vaultwarden.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
vaultwarden
string
controllers.vaultwarden.pod.topologySpreadConstraints[].maxSkew (1)
1
number
controllers.vaultwarden.pod.topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
controllers.vaultwarden.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
controllers.vaultwarden.initContainers.init-db.envFrom[].secretRef.name (4)
vaultwarden-secret
string
controllers.vaultwarden.initContainers.init-db.image.repository (4)
ghcr.io/home-operations/postgres-init
string
controllers.vaultwarden.initContainers.init-db.image.tag (4)
17
string, number
controllers.vaultwarden.initContainers.01-init-branding.args[] (1)
- mkdir -p /data/templates; mc alias set s3 https://s3.t0m.co '' '' --api S3v4; mc cp --recursive s3/t0m-public/vaultwarden/templates/ /data/templates/
string
controllers.vaultwarden.initContainers.01-init-branding.command[] (1)
- /bin/sh
- -c
string
controllers.vaultwarden.initContainers.01-init-branding.image.repository (1)
quay.io/minio/mc
string
controllers.vaultwarden.initContainers.01-init-branding.image.tag (1)
RELEASE.2025-05-21T01-59-54Z@sha256:09f93f534cde415d192bb6084dd0e0ddd1715fb602f8a922ad121fd2bf0f8b44
string
controllers.vaultwarden.initContainers.01-init-db.envFrom[].secretRef.name (1)
vaultwarden-secret
string
controllers.vaultwarden.initContainers.01-init-db.image.pullPolicy (1)
IfNotPresent
string
controllers.vaultwarden.initContainers.01-init-db.image.repository (1)
ghcr.io/home-operations/postgres-init
string
controllers.vaultwarden.initContainers.01-init-db.image.tag (1)
17.5
number
controllers.vaultwarden.strategy (2)
Recreate
string
controllers.vaultwarden.labels.postgres (1)
true
string
controllers.vaultwarden.replicas (1)
2
number
controllers.${APP}.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.${APP}.containers.app.env.TZ (1)
${TIMEZONE}
string
controllers.${APP}.containers.app.image.pullPolicy (1)
IfNotPresent
string
controllers.${APP}.containers.app.image.repository (1)
ghcr.io/dani-garcia/vaultwarden
string
controllers.${APP}.containers.app.image.tag (1)
1.34.1@sha256:48267ea14d8649b2e553a5fe290c40b5dd94d54e9a24b26ae7134a75a659695f
string
controllers.${APP}.containers.app.probes.liveness.custom (1)
true
boolean
controllers.${APP}.containers.app.probes.liveness.enabled (1)
true
boolean
controllers.${APP}.containers.app.probes.liveness.spec.failureThreshold (1)
3
number
controllers.${APP}.containers.app.probes.liveness.spec.httpGet.path (1)
/alive
string
controllers.${APP}.containers.app.probes.liveness.spec.httpGet.port (1)
80
number
controllers.${APP}.containers.app.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.${APP}.containers.app.probes.liveness.spec.periodSeconds (1)
10
number
controllers.${APP}.containers.app.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.${APP}.containers.app.probes.readiness.custom (1)
true
boolean
controllers.${APP}.containers.app.probes.readiness.enabled (1)
true
boolean
controllers.${APP}.containers.app.probes.readiness.spec.failureThreshold (1)
3
number
controllers.${APP}.containers.app.probes.readiness.spec.httpGet.path (1)
/alive
string
controllers.${APP}.containers.app.probes.readiness.spec.httpGet.port (1)
80
number
controllers.${APP}.containers.app.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.${APP}.containers.app.probes.readiness.spec.periodSeconds (1)
10
number
controllers.${APP}.containers.app.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.${APP}.containers.app.resources.limits.memory (1)
256Mi
string
controllers.${APP}.containers.app.resources.requests.cpu (1)
10m
string
controllers.${APP}.containers.app.resources.requests.memory (1)
64Mi
string
controllers.${APP}.containers.app.securityContext.fsGroup (1)
1000
number
controllers.${APP}.containers.app.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.${APP}.containers.app.securityContext.runAsGroup (1)
1000
number
controllers.${APP}.containers.app.securityContext.runAsNonRoot (1)
true
boolean
controllers.${APP}.containers.app.securityContext.runAsUser (1)
1000
number
controllers.${APP}.containers.app.securityContext.seccompProfile.type (1)
RuntimeDefault
string
controllers.${APP}.containers.backup.env.BACKUP_KEEP_DAYS (1)
30
number
controllers.${APP}.containers.backup.env.CRON (1)
0 5 * * *
string
controllers.${APP}.containers.backup.env.DATA_DIR (1)
/data
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_FAILURE_CURL_OPTIONS (1)
-H 'Content-Type: application/json' -d '{"content":"❌ Vaultwarden backup failed!"}'
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_FAILURE.valueFrom.secretKeyRef.key (1)
VAULTWARDEN_BACKUP_PING_URL
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_FAILURE.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_SUCCESS_CURL_OPTIONS (1)
-H 'Content-Type: application/json' -d '{"content":"✅ Vaultwarden backup completed successfully."}'
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_SUCCESS.valueFrom.secretKeyRef.key (1)
VAULTWARDEN_BACKUP_PING_URL
string
controllers.${APP}.containers.backup.env.PING_URL_WHEN_SUCCESS.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.${APP}.containers.backup.env.RCLONE_CONFIG (1)
/data/rclone.conf
string
controllers.${APP}.containers.backup.env.RCLONE_REMOTE_DIR (1)
/Vaultwarden-k3s/
string
controllers.${APP}.containers.backup.env.RCLONE_REMOTE_NAME (1)
Google Drive
string
controllers.${APP}.containers.backup.env.RCLONE_TEMP_DIR (1)
/data/
string
controllers.${APP}.containers.backup.env.TIMEZONE (1)
${TIMEZONE}
string
controllers.${APP}.containers.backup.env.ZIP_ENABLE (1)
true
boolean
controllers.${APP}.containers.backup.env.ZIP_PASSWORD.valueFrom.secretKeyRef.key (1)
VAULTWARDEN_BACKUP_ZIP_PASSWORD
string
controllers.${APP}.containers.backup.env.ZIP_PASSWORD.valueFrom.secretKeyRef.name (1)
vaultwarden-secret
string
controllers.${APP}.containers.backup.image.pullPolicy (1)
IfNotPresent
string
controllers.${APP}.containers.backup.image.repository (1)
ghcr.io/ttionya/vaultwarden-backup
string
controllers.${APP}.containers.backup.image.tag (1)
1.24.4@sha256:cc3f7136bf55a85449c2e429c5cc899c6f955222a002303fef68f8916665b89b
string
controllers.${APP}.containers.backup.nameOverride (1)
backup
string
controllers.${APP}.containers.backup.resources.limits.memory (1)
256Mi
string
controllers.${APP}.containers.backup.resources.requests.cpu (1)
10m
string
controllers.${APP}.containers.backup.resources.requests.memory (1)
64Mi
string
controllers.${APP}.containers.backup.securityContext.fsGroup (1)
1000
number
controllers.${APP}.containers.backup.securityContext.readOnlyRootFilesystem (1)
false
boolean
controllers.${APP}.enabled (1)
true
boolean
controllers.${APP}.replicas (1)
1
number
controllers.${APP}.type (1)
deployment
string
service.app.ports.http.port (11)
80
number
service.app.ports.websocket.enabled (2)
true
boolean
service.app.ports.websocket.port (2)
3012
number
service.app.controller (9)
vaultwarden
string
service.app.sessionAffinity (1)
ClientIP
string
service.app.sessionAffinityConfig.clientIP.timeoutSeconds (1)
10800
number
service.vaultwarden.controller (1)
vaultwarden
string
service.vaultwarden.ports.http.port (1)
8080
number
ingress.app.hosts[].host (8)
vault.${SECRET_DOMAIN}
string
ingress.app.hosts[].paths[].path (8)
/
string
ingress.app.hosts[].paths[].service.identifier (8)
app
string
ingress.app.hosts[].paths[].service.port (8)
http
number, string
ingress.app.hosts[].paths[].pathType (1)
Prefix
string
ingress.app.className (7)
external
string
ingress.app.tls[].hosts[] (5)
- vault.${SECRET_DOMAIN}
string
ingress.app.tls[].secretName (3)
${SECRET_DOMAIN/./-}-tls
string
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (4)
external.${SECRET_DOMAIN}
string
ingress.app.annotations."gethomepage.dev/enabled" (3)
true
string
ingress.app.annotations."gethomepage.dev/group" (3)
Applications
string
ingress.app.annotations."gethomepage.dev/icon" (3)
vaultwarden.png
string
ingress.app.annotations."gethomepage.dev/name" (3)
Vaultwarden
string
ingress.app.annotations."gethomepage.dev/description" (2)
Open-source password manager compatible with Bitwarden clients.
string
ingress.app.annotations."traefik.ingress.kubernetes.io/router.middlewares" (2)
networking-traefik-middleware-chain-no-auth@kubernetescrd
string
ingress.app.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.app.annotations."gethomepage.dev/pod-selector" (1)
app in ( vaultwarden )
string
ingress.app.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
ingress.app.enabled (3)
true
boolean
ingress.admin.hosts[].host (3)
${app_url}
string
ingress.admin.hosts[].paths[].path (3)
/admin
string
ingress.admin.hosts[].paths[].service.identifier (3)
app
string
ingress.admin.hosts[].paths[].service.port (3)
http
string
ingress.admin.hosts[].paths[].pathType (1)
ImplementationSpecific
string
ingress.admin.tls[].hosts[] (3)
- ${app_url}
string
ingress.admin.tls[].secretName (3)
${certificate_name}
string
ingress.admin.annotations."traefik.ingress.kubernetes.io/router.middlewares" (2)
networking-traefik-middleware-chain-tinyauth@kubernetescrd
string
ingress.admin.annotations."external-dns.alpha.kubernetes.io/exclude" (1)
true
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-response-headers" (1)
Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-signin" (1)
https://$host/outpost.goauthentik.io/start?rd=$scheme://$http_host$escaped_request_uri
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-snippet" (1)
proxy_set_header X-Forwarded-Host $http_host;
string
ingress.admin.annotations."nginx.ingress.kubernetes.io/auth-url" (1)
http://ak-outpost-gabernetes.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
string
ingress.admin.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
ingress.admin.enabled (2)
true
boolean
ingress.admin.className (1)
traefik-internal
string
ingress.vaultwarden.enabled (1)
true
boolean
ingress.vaultwarden.hosts[].host (1)
${app_url}
string
ingress.vaultwarden.hosts[].paths[].path (1)
/
string
ingress.vaultwarden.hosts[].paths[].service.identifier (1)
vaultwarden
string
ingress.vaultwarden.hosts[].paths[].service.port (1)
http
string
ingress.vaultwarden.tls[].hosts[] (1)
- ${app_url}
string
ingress.vaultwarden.tls[].secretName (1)
${certificate_name}
string
persistence.config.existingClaim (6)
vaultwarden
string
persistence.config.globalMounts[].path (6)
/data
string
persistence.config.enabled (2)
true
boolean
persistence.data.accessMode (3)
ReadWriteOnce
string
persistence.data.existingClaim (3)
vaultwarden
string
persistence.data.size (3)
8Gi
string
persistence.data.storageClass (3)
longhorn-ssd
string
persistence.data.enabled (2)
true
boolean
persistence.data.globalMounts[].path (2)
/data
string
persistence.data.retain (2)
true
boolean
persistence.data.type (2)
persistentVolumeClaim
string
persistence.data.advancedMounts.vaultwarden.app[].path (1)
/data
string
persistence.data.suffix (1)
data
string
persistence.env.advancedMounts.${APP}.app[].path (1)
/.env
string
persistence.env.advancedMounts.${APP}.app[].readOnly (1)
true
boolean
persistence.env.advancedMounts.${APP}.app[].subPath (1)
.env
string
persistence.env.enabled (1)
true
boolean
persistence.env.items[].key (1)
.env
string
persistence.env.items[].path (1)
.env
string
persistence.env.name (1)
vaultwarden-secret
string
persistence.env.type (1)
secret
string
persistence.postgres-serving-cert.advancedMounts.vaultwarden.app[].path (1)
/certs/postgres/serving
string
persistence.postgres-serving-cert.defaultMode (1)
444
number
persistence.postgres-serving-cert.items[].key (1)
ca.crt
string
persistence.postgres-serving-cert.items[].path (1)
ca.crt
string
persistence.postgres-serving-cert.name (1)
vaultwarden-postgres-17-serving-cert
string
persistence.postgres-serving-cert.type (1)
secret
string
persistence.postgres-user-cert.advancedMounts.vaultwarden.app[].path (1)
/certs/postgres/user
string
persistence.postgres-user-cert.defaultMode (1)
440
number
persistence.postgres-user-cert.items[].key (1)
tls.crt
tls.key
string
persistence.postgres-user-cert.items[].path (1)
tls.crt
tls.key
string
persistence.postgres-user-cert.name (1)
vaultwarden-postgres-vaultwarden-user
string
persistence.postgres-user-cert.type (1)
secret
string
defaultPodOptions.securityContext.runAsGroup (2)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (2)
true
boolean
defaultPodOptions.securityContext.runAsUser (2)
1000
number
defaultPodOptions.securityContext.fsGroup (1)
1000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
route.app.hostnames[] (2)
- passwords.${SECRET_DOMAIN}
string
route.app.parentRefs[].name (2)
external
string
route.app.parentRefs[].namespace (2)
network
string
route.app.parentRefs[].sectionName (2)
https
string
route.app.rules[].backendRefs[].name (1)
vaultwarden
string
route.app.rules[].backendRefs[].port (1)
80
number