---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: amnezia-fellow
  labels:
    app: amnezia-fellow
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: amnezia-fellow
  template:
    metadata:
      labels:
        app: amnezia-fellow
    spec:
      serviceAccountName: amnezia-fellow
      nodeSelector:
        kubernetes.io/os: linux
        kubernetes.io/hostname: cy.tail2fe2d.ts.net
      containers:
        - name: amnezia-fellow
          image: ultradesu/amnezia-fellow:latest
          imagePullPolicy: Always
          ports:
            - name: http
              containerPort: 8000
              protocol: TCP
          env:
            - name: AMNEZIA_FELLOW_DATABASE_URL
              value: "sqlite:///data/amnezia-fellow.sqlite3?mode=rwc"
            - name: AMNEZIA_FELLOW_K8S_NAMESPACE
              value: "amnezia"
            - name: AMNEZIA_FELLOW_K8S_CLIENTS_SECRET
              value: "amneziawg-clients"
            - name: AMNEZIA_FELLOW_K8S_CLIENTS_SECRET_KEY
              value: "peers.conf"
            - name: AMNEZIA_FELLOW_K8S_SERVER_SECRET
              value: "amneziawg-server"
            - name: AMNEZIA_FELLOW_K8S_ENDPOINTS_SECRET
              value: "amneziawg-endpoints"
            - name: AMNEZIA_FELLOW_VPN_CLIENT_CIDR
              value: "10.8.0.0/16"
            - name: AMNEZIA_FELLOW_VPN_MTU
              value: "1376"
          readinessProbe:
            tcpSocket:
              port: http
            initialDelaySeconds: 5
            periodSeconds: 10
            timeoutSeconds: 3
          livenessProbe:
            tcpSocket:
              port: http
            initialDelaySeconds: 30
            periodSeconds: 30
            timeoutSeconds: 5
          resources:
            requests:
              cpu: "50m"
              memory: "128Mi"
            limits:
              cpu: "500m"
              memory: "512Mi"
          volumeMounts:
            - name: data
              mountPath: /data
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: amnezia-fellow-data