apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
  name: postgres-cluster
  namespace: postgres
spec:
  instances: 3

  storage:
    size: 10Gi

  backup:
    retentionPolicy: 7d

  certificates:
    serverCASecret: postgres-server-cert
    serverTLSSecret: postgres-server-cert
    clientCASecret: postgres-server-cert
    replicationTLSSecret: postgres-replication-cert
  postgresql:
    pg_hba:
      - hostssl all all all cert

  # this is needed for immich
    shared_preload_libraries:
    - "vchord.so"
  imageName: ghcr.io/tensorchord/cloudnative-vectorchord:17.5-0.3.0


  # this is here because no `Role` crd exists yet.
  # see https://github.com/cloudnative-pg/cloudnative-pg/issues/5341
  managed:
    roles:
    - name: authentik
      login: true
      disablePassword: true
    - name: atuin
      login: true
      disablePassword: true
    - name: gitea
      login: true
      disablePassword: true
    - name: immich
      login: true
      disablePassword: true
    - name: kyoo
      login: true
      disablePastword: true