commit 9ef2c6e0442172ee2c947fc9f43a5fbf56bb902a
Author: ran mad <rani@tuahpacket.net>
Date:   Sat Jul 11 20:44:55 2026 +0800

    Initial ORION Platform repository

diff --git a/README.md b/README.md
new file mode 100644
index 0000000..648d62d
--- /dev/null
+++ b/README.md
@@ -0,0 +1,19 @@
+# ORION Platform
+
+Infrastructure-as-Code repository for the ORION platform.
+
+## Components
+
+- Kubernetes
+- Ceph RBD
+- MetalLB
+- NGINX Ingress
+- Harbor
+- Gitea
+- Prometheus
+- Grafana
+- Zammad
+
+This repository is the single source of truth for ORION infrastructure.
+
+Author: Lyra & Master
diff --git a/helm-values/argocd.yaml b/helm-values/argocd.yaml
new file mode 100644
index 0000000..e076c3b
--- /dev/null
+++ b/helm-values/argocd.yaml
@@ -0,0 +1,19 @@
+global:
+  domain: ""
+
+server:
+  service:
+    type: LoadBalancer
+
+configs:
+  params:
+    server.insecure: "true"
+
+controller:
+  replicas: 1
+
+repoServer:
+  replicas: 1
+
+applicationSet:
+  replicas: 1
diff --git a/helm-values/ceph-csi-rbd.yaml b/helm-values/ceph-csi-rbd.yaml
new file mode 100644
index 0000000..ae78ab1
--- /dev/null
+++ b/helm-values/ceph-csi-rbd.yaml
@@ -0,0 +1,25 @@
+storageClass:
+  create: true
+  name: ceph-rbd
+
+  clusterID: 7ae9db44-31e4-4bc8-ba17-d3c19d74add8
+
+  pool: vm-data
+
+  reclaimPolicy: Delete
+
+  allowVolumeExpansion: true
+
+secret:
+  create: true
+
+  userID: kubernetes
+
+  userKey: AQAL61BqoOPoFxAA/gpYFD26HT5WSSXb9ZgW9Q==
+
+csiConfig:
+  - clusterID: 7ae9db44-31e4-4bc8-ba17-d3c19d74add8
+    monitors:
+      - 172.17.20.251:6789
+      - 172.17.20.252:6789
+      - 172.17.20.253:6789
diff --git a/helm-values/cert-manager.yaml b/helm-values/cert-manager.yaml
new file mode 100644
index 0000000..c3d6883
--- /dev/null
+++ b/helm-values/cert-manager.yaml
@@ -0,0 +1,7 @@
+crds:
+  enabled: true
+
+replicaCount: 2
+
+prometheus:
+  enabled: true
diff --git a/helm-values/gitea.yaml b/helm-values/gitea.yaml
new file mode 100644
index 0000000..ad4b491
--- /dev/null
+++ b/helm-values/gitea.yaml
@@ -0,0 +1,59 @@
+replicaCount: 1
+
+strategy:
+  type: Recreate
+
+service:
+  http:
+    type: ClusterIP
+
+ingress:
+  enabled: true
+  className: nginx
+  hosts:
+    - host: gitea.etsb.cloud
+      paths:
+        - path: /
+          pathType: Prefix
+
+persistence:
+  enabled: true
+  storageClass: ceph-rbd
+  size: 20Gi
+
+postgresql:
+  enabled: true
+  primary:
+    persistence:
+      enabled: true
+      storageClass: ceph-rbd
+      size: 10Gi
+
+postgresql-ha:
+  enabled: false
+
+valkey-cluster:
+  enabled: false
+
+valkey:
+  enabled: true
+  architecture: standalone
+
+  primary:
+    persistence:
+      enabled: true
+      storageClass: ceph-rbd
+      size: 2Gi
+
+gitea:
+  admin:
+    username: lyra
+    password: Orion@123
+    email: admin@orion.lab
+
+  config:
+    server:
+      DOMAIN: gitea.etsb.cloud
+      ROOT_URL: https://gitea.etsb.cloud/
+      SSH_DOMAIN: gitea.etsb.cloud
+      START_SSH_SERVER: true
diff --git a/helm-values/harbor.yaml b/helm-values/harbor.yaml
new file mode 100644
index 0000000..c56c545
--- /dev/null
+++ b/helm-values/harbor.yaml
@@ -0,0 +1,62 @@
+expose:
+  type: ingress
+
+  ingress:
+    className: nginx
+    hosts:
+      core: harbor.etsb.cloud
+
+externalURL: https://harbor.etsb.cloud
+
+harborAdminPassword: Orion@123
+
+persistence:
+  enabled: true
+
+  persistentVolumeClaim:
+
+    registry:
+      storageClass: ceph-rbd
+      size: 100Gi
+
+    jobservice:
+      jobLog:
+        storageClass: ceph-rbd
+        accessMode: ReadWriteOnce
+        size: 5Gi
+
+    database:
+      storageClass: ceph-rbd
+      accessMode: ReadWriteOnce
+      size: 20Gi
+
+    redis:
+      storageClass: ceph-rbd
+      accessMode: ReadWriteOnce
+      size: 5Gi
+
+    trivy:
+      storageClass: ceph-rbd
+      accessMode: ReadWriteOnce
+      size: 20Gi
+
+database:
+  type: internal
+
+redis:
+  type: internal
+
+trivy:
+  enabled: true
+
+portal:
+  replicas: 1
+
+core:
+  replicas: 1
+
+jobservice:
+  replicas: 1
+
+registry:
+  replicas: 1
diff --git a/helm-values/ingress-nginx.yaml b/helm-values/ingress-nginx.yaml
new file mode 100644
index 0000000..b8fc006
--- /dev/null
+++ b/helm-values/ingress-nginx.yaml
@@ -0,0 +1,8 @@
+controller:
+  service:
+    type: LoadBalancer
+
+  replicaCount: 2
+
+  ingressClassResource:
+    default: true
diff --git a/helm-values/postgresql.yaml b/helm-values/postgresql.yaml
new file mode 100644
index 0000000..38f7930
--- /dev/null
+++ b/helm-values/postgresql.yaml
@@ -0,0 +1,24 @@
+global:
+  storageClass: ceph-rbd
+
+architecture: standalone
+
+auth:
+  postgresPassword: "xs2cidb"
+  username: "orion"
+  password: "xs2cidb"
+  database: "orion"
+
+primary:
+  persistence:
+    enabled: true
+    size: 100Gi
+
+  resources:
+    requests:
+      cpu: 500m
+      memory: 1Gi
+
+    limits:
+      cpu: 2
+      memory: 4Gi
diff --git a/helm-values/rancher.yaml b/helm-values/rancher.yaml
new file mode 100644
index 0000000..0e4d909
--- /dev/null
+++ b/helm-values/rancher.yaml
@@ -0,0 +1,9 @@
+hostname: rancher.etsb.cloud
+
+replicas: 2
+
+bootstrapPassword: "OrionAdmin123!"
+
+ingress:
+  tls:
+    source: secret