apiVersion: v2
name: redis
description: |
  Single-instance Redis for this homelab, backing toolshed's managed cache
  add-on (internal/dbprovision) — toolshed provisions a per-app ACL user
  scoped to its own key prefix on request.

  Hand-written rather than vendoring Bitnami's chart, for the same reason
  the sibling postgresql chart is: Broadcom has been retiring and freezing
  images behind that repo (claude.md infra issue #4, where it broke Contour
  twice), and Redis publishes no official Helm chart of its own.

  Authentication is defined entirely by the ACL file, with no requirepass.
  That is not a style choice — see values.yaml, where the reasoning is
  recorded alongside the setting it explains. Getting it wrong leaves the
  server open to unauthenticated access after its first restart.

  Not highly available and not intended to be. One replica, one PVC, no
  replication, no sentinel. On a single-node cluster those would be
  theatre.
type: application
version: 0.1.0
appVersion: "7"