apiVersion: apps/v1
kind: Deployment
metadata:
  name: firefly-data-importer
  labels:
    app.kubernetes.io/name: firefly-data-importer
  annotations:
    reloader.stakater.com/auto: "true"
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app.kubernetes.io/name: firefly-data-importer
  template:
    metadata:
      labels:
        app.kubernetes.io/name: firefly-data-importer
    spec:
      nodeSelector:
        kubernetes.io/hostname: ai.tail2fe2d.ts.net
      tolerations:
        - key: workload
          operator: Equal
          value: ai
          effect: NoSchedule
      containers:
        - name: data-importer
          image: fireflyiii/data-importer:version-2.3.4
          imagePullPolicy: IfNotPresent
          env:
            - name: FIREFLY_III_URL
              value: http://firefly-iii
            - name: VANITY_URL
              value: http://ff.lan
            - name: TRUSTED_PROXIES
              value: "**"
            - name: EXPECT_SECURE_URL
              value: "false"
            - name: VERIFY_TLS_SECURITY
              value: "true"
            - name: TZ
              value: Europe/London
            - name: APP_ENV
              value: production
            - name: APP_DEBUG
              value: "false"
            - name: LOG_LEVEL
              value: notice
            - name: ENABLE_BANKING_APP_ID
              valueFrom:
                secretKeyRef:
                  name: firefly-data-importer-secrets
                  key: ENABLE_BANKING_APP_ID
            - name: ENABLE_BANKING_PRIVATE_KEY
              valueFrom:
                secretKeyRef:
                  name: firefly-data-importer-secrets
                  key: ENABLE_BANKING_PRIVATE_KEY
          ports:
            - name: http
              containerPort: 8080
              protocol: TCP
          readinessProbe:
            tcpSocket:
              port: http
            initialDelaySeconds: 5
            periodSeconds: 10
          livenessProbe:
            tcpSocket:
              port: http
            initialDelaySeconds: 20
            periodSeconds: 30
          resources:
            requests:
              cpu: 50m
              memory: 128Mi
            limits:
              cpu: "1"
              memory: 512Mi
          securityContext:
            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
      securityContext:
        seccompProfile:
          type: RuntimeDefault
---
apiVersion: v1
kind: Service
metadata:
  name: firefly-data-importer
  labels:
    app.kubernetes.io/name: firefly-data-importer
spec:
  type: ClusterIP
  selector:
    app.kubernetes.io/name: firefly-data-importer
  ports:
    - name: http
      port: 80
      targetPort: http
      protocol: TCP
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: firefly-data-importer
  labels:
    app.kubernetes.io/name: firefly-data-importer
    firefly.hexor.cy/private-ai: "true"
  annotations:
    kubernetes.io/ingress.class: traefik-ai
spec:
  rules:
    - host: import.ff.lan
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: firefly-data-importer
                port:
                  number: 80