# insecure_federation is false on purpose: Traefik + cert-manager give this
# a real TLS certificate (see ingress.yaml), so there's no need for the
# plain-HTTP dev escape hatch described in internal/federation/wellknown.go.
apiVersion: v1
kind: ConfigMap
metadata:
  name: gitfed-config
  namespace: gitfed
data:
  gitfed.json: |
    {
      "domain": "git.neuromancer.ovh",
      "data_dir": "/data",
      "repos_dir": "/data/repos",
      "listen_ssh": ":2222",
      "listen_http": ":8443",
      "contact": "bastien.marques@outlook.com",
      "trust_policy": "whitelist",
      "cert_ttl_hours": 24,
      "insecure_federation": false
    }