apiVersion: v1
kind: ConfigMap
metadata:
  name: immich-config
  namespace: immich
data:
  TZ: "Europe/Bratislava"

  # The database in this namespace, not the shared one in the database
  # namespace: v3 needs VectorChord, and only the dedicated image carries it.
  DB_HOSTNAME: "immich-postgres"
  DB_PORT: "5432"
  DB_USERNAME: "immich"
  DB_DATABASE_NAME: "immich"
  DB_SSL_MODE: "disable"
  DB_VECTOR_EXTENSION: "vectorchord"

  REDIS_HOSTNAME: "immich-valkey"
  REDIS_PORT: "6379"

  # Traefik is the only client of the server, and it is a pod: the address immich
  # sees is inside the node's pod CIDR. Without this the server does not trust
  # X-Forwarded-For and every request looks like it came from Traefik itself.
  IMMICH_TRUSTED_PROXIES: "10.244.0.0/24"