Increase gitea resources and add ha-proxy logging

values/gitea/values/values.yaml

@@ -7,7 +7,7 @@ image:
 
 resources:
   requests:
-    cpu: 200m
+    cpu: 500m
     memory: 512Mi
 
 strategy:
@@ -82,6 +82,8 @@ gitea:
     database:
       DB_TYPE: postgres
       MAX_OPEN_CONNS: 90
+      MAX_IDLE_CONNS: 20
+      CONN_MAX_LIFETIME: 3h
     openid:
       ENABLE_OPENID_SIGNIN: false
       ENABLE_OPENID_SIGNUP: false

values/ingress-haproxy/values/ingress-haproxy.yaml.gotmpl

@@ -19,6 +19,10 @@ controller:
     ssl-redirect: "true"
     forwarded-for: "true"
 
+    # NOTE: Emit HAProxy access logs (real client IP + request line)
+    # to the controller's stdout so `kubectl logs` can see them.
+    syslog-server: "address:stdout, format: raw, facility: daemon"
+
     # Disable QUIC ar Hetzner LB doesn't support UDP
     quic-enabled: "false"