Configuration Reference

global:
  domain: 'rulebricks.acme.com'
  email: 'devops@acme.com'

global:
  smtp:
    host: 'email-smtp.us-east-1.amazonaws.com'
    port: 587
    user: 'AKIAIOSFODNN7EXAMPLE'
    pass: 'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY'
    from: 'no-reply@yourdomain.com'
    fromName: 'Your Company - Rulebricks'

global:
  supabase:
    url: 'https://abcd1234.supabase.co'
    anonKey: '<from-supabase-dashboard>'
    serviceKey: '<from-supabase-dashboard>'
    accessToken: '<personal-access-token>'
 
supabase:
  enabled: false # Disable self-hosted Supabase

global:
  supabase:
    emails:
      subjects:
        invite: 'Join your team on Rulebricks'
        confirmation: 'Confirm Your Email'
        recovery: 'Reset Your Password'
        emailChange: 'Confirm Email Change'
      templates:
        invite: 'https://your-cdn.com/templates/invite.html'
        confirmation: 'https://your-cdn.com/templates/verify.html'
        recovery: 'https://your-cdn.com/templates/password_change.html'
        emailChange: 'https://your-cdn.com/templates/email_change.html'

global:
  ai:
    enabled: true
    openaiApiKey: 'sk-...'

global:
  secrets:
    secretRef: 'rulebricks-external-secrets'
    secretRefKeys:
      licenseKey: 'RULEBRICKS_LICENSE'
      smtpUser: 'SMTP_USERNAME'
      smtpPass: 'SMTP_PASSWORD'
      supabaseAnonKey: 'SUPABASE_ANON'
      supabaseServiceKey: 'SUPABASE_SERVICE'
      supabaseAccessToken: 'SUPABASE_TOKEN'
      openaiApiKey: 'OPENAI_KEY'

# High-throughput configuration
# Replicas should match partitions
rulebricks:
  hps:
    replicas: 4
    workers:
      replicas: 8
      keda:
        minReplicaCount: 12
        maxReplicaCount: 32
        lagThreshold: 5
        cpuThreshold: 20

kafka:
  overrideConfiguration:
    auto.create.topics.enable: 'true'
    log.retention.hours: '24' # Adjust based on log volume
    default.replication.factor: '1' # Increase for HA
    offsets.topic.replication.factor: '1'
    num.partitions: '12' # Increase for parallelism
  controller:
    extraEnvVars:
      - name: KAFKA_JVM_PERFORMANCE_OPTS
        value: '-XX:MaxDirectMemorySize=256M -Djdk.nio.maxCachedBufferSize=262144'
      - name: KAFKA_CFG_QUEUED_MAX_REQUESTS
        value: '10000'
      - name: KAFKA_CFG_NUM_NETWORK_THREADS
        value: '8'
      - name: KAFKA_CFG_NUM_IO_THREADS
        value: '8'
      - name: KAFKA_CFG_SOCKET_SEND_BUFFER_BYTES
        value: '1048576'
      - name: KAFKA_CFG_SOCKET_RECEIVE_BUFFER_BYTES
        value: '1048576'
      - name: KAFKA_CFG_SOCKET_REQUEST_MAX_BYTES
        value: '209715200'
      - name: KAFKA_CFG_LOG_RETENTION_BYTES
        value: '4294967296'
      - name: KAFKA_CFG_LOG_SEGMENT_BYTES
        value: '1073741824'
      - name: KAFKA_CFG_NUM_REPLICA_FETCHERS
        value: '4'
      - name: KAFKA_CFG_REPLICA_SOCKET_RECEIVE_BUFFER_BYTES
        value: '1048576'
      - name: KAFKA_CFG_LOG_CLEANER_DEDUPE_BUFFER_SIZE
        value: '268435456'
      - name: KAFKA_CFG_LOG_CLEANER_IO_BUFFER_SIZE
        value: '1048576'
      - name: KAFKA_CFG_MAX_IN_FLIGHT_REQUESTS_PER_CONNECTION
        value: '10'
  listeners:
    client:
      protocol: PLAINTEXT
    controller:
      protocol: PLAINTEXT
    interbroker:
      protocol: PLAINTEXT

kafka:
  controller:
    replicaCount: 3
  overrideConfiguration:
    default.replication.factor: '3'
    min.insync.replicas: '2'

vector:
  customConfig:
    sources:
      kafka:
        type: kafka
        bootstrap_servers: '${KAFKA_BOOTSTRAP_SERVERS:-rulebricks-kafka:9092}'
        topics:
          - logs
        group_id: vector-consumers
        auto_offset_reset: latest
    sinks:
      # Console output (default)
      console:
        type: console
        inputs: [kafka]
        encoding:
          codec: json
 
      # S3 sink example
      s3:
        type: aws_s3
        inputs: [kafka]
        bucket: 'your-logs-bucket'
        region: 'us-east-1'
        key_prefix: 'rulebricks/logs/%Y/%m/%d/'
        compression: gzip
        encoding:
          codec: json

external-dns:
  enabled: true
  provider: route53
  # Uses IRSA - ensure service account has Route53 permissions

external-dns:
  enabled: true
  provider: cloudflare
  extraEnvVars:
    - name: CF_API_TOKEN
      valueFrom:
        secretKeyRef:
          name: cloudflare-api-token
          key: api-token

external-dns:
  enabled: true
  provider: google
  google:
    project: 'your-gcp-project'

external-dns:
  enabled: true
  provider: azure
  azure:
    resourceGroup: 'your-resource-group'
    subscriptionId: 'your-subscription-id'

kube-prometheus-stack:
  prometheus:
    prometheusSpec:
      retention: 30d
      storageSpec:
        volumeClaimTemplate:
          spec:
            storageClassName: gp3
            resources:
              requests:
                storage: 50Gi