grafana:
  enabled: true

  ingress:
    enabled: true
    ingressClassName: traefik
    annotations:
      traefik.ingress.kubernetes.io/router.entrypoints: websecure
    hosts:
      - {{ .Env.GRAFANA_HOST }}
    tls:
      - secretName: grafana-certificate-secret
      - hosts:
          - {{ .Env.GRAFANA_HOST }}
    annotations:
      traefik.ingress.kubernetes.io/router.tls: "true"
      traefik.ingress.kubernetes.io/router.tls.certresolver: ""  # empty = use secretName, not its own resolver

  grafana.ini:
    server:
      domain: {{ .Env.GRAFANA_HOST }}
      root_url: https://{{ .Env.GRAFANA_HOST }}
      serve_from_sub_path: false