ci: add Forgejo build and deployment workflows

deploy/helm/go-bananas/values-prd.yaml

@@ -1,20 +1,31 @@
-# PRD values for go-bananas
-nameOverride: ""
-fullnameOverride: ""
+# Production values for go-bananas. Secret values remain in the Kubernetes Secret
+# created by the Forgejo deployment job.
+global:
+  imagePullSecrets:
+    - name: nexus-registry
 
-replicaCount: 1
-
-imagePullSecrets:
-  - name: nexus-registry
+deployment:
+  replicaCount: 1
 
 image:
-  repository: nexus.urpi.be/docker-hosted/go-bananas
-  tag: "0.0.1"
+  registry: nexus.urpi.be
+  repository: docker-hosted/go-bananas
+  tag: latest
   pullPolicy: Always
 
+config:
+  environment: production
+  publicBaseUrl: https://bananas.urpi.be
+
+persistence:
+  enabled: true
+  type: persistentVolumeClaim
+  size: 2Gi
+
 service:
   type: ClusterIP
   port: 80
+  sessionSecure: true
 
 ingress:
   enabled: true
@@ -32,16 +43,17 @@ ingress:
       hosts:
         - bananas.urpi.be
 
-certManager:
-  enabled: true
-  issuerRef:
-    name: letsencrypt-prod
-    kind: ClusterIssuer
+identity:
+  mode: oidc
+  oidc:
+    issuer: https://auth.urpi.be/realms/urpi
+    clientId: go-bananas
+    existingSecret: go-bananas-auth
+    generateSecret: false
 
 resources:
-  limits:
-    cpu: 500m
-    memory: 512Mi
   requests:
     cpu: 100m
-    memory: 256Mi
+    memory: 128Mi
+  limits:
+    memory: 512Mi