---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: server
spec:
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app.kubernetes.io/component: server
  template:
    metadata:
      labels:
        app.kubernetes.io/component: server
    spec:
      serviceAccountName: server
      containers:
      - env:
          - name: ENVIRONMENT
            value: production
        image: quay.io/shivering-isles/ente-server:sslmode
        imagePullPolicy: IfNotPresent
        name: jellyfin
        readinessProbe:
          httpGet:
            path: /ping
            port: 8080
        ports:
          - containerPort: 8080
            protocol: TCP
            name: http
        volumeMounts:
          - name: config
            mountPath: /configurations
            readOnly: true
        resources:
          requests:
            memory: 1Gi
            cpu: 200m
          limits:
            memory: 1.5Gi
            cpu: "1"
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
              - ALL
      restartPolicy: Always
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
        runAsGroup: 1000
        fsGroup: 1000
        seccompProfile:
          type: "RuntimeDefault"
      volumes:
      - name: config
        secret:
          secretName: ente-config