apiVersion: apps/v1
kind: Deployment
metadata:
  name: vaultwarden
spec:
  selector:
    matchLabels:
      app: vaultwarden
  template:
    metadata:
      labels:
        app: vaultwarden
    spec:
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: vaultwarden
      containers:
      - name: vaultwarden
        image: vaultwarden
        env:
        - name: TZ
          value: Asia/Shanghai
        - name: DATABASE_URL
          valueFrom:
            configMapKeyRef:
              key: database-url
              name: vaultwarden
        - name: ADMIN_TOKEN
          valueFrom:
            secretKeyRef:
              key: admin-token
              name: vaultwarden
        - name: DOMAIN
          valueFrom:
            configMapKeyRef:
              key: domain
              name: vaultwarden
        - name: PASSWORD_HINTS_ALLOWED
          valueFrom:
            configMapKeyRef:
              key: password-hints-allowed
              name: vaultwarden
        - name: SIGNUPS_ALLOWED
          valueFrom:
            configMapKeyRef:
              key: signups-allowed
              name: vaultwarden
        - name: WEBSOCKET_ENABLED
          valueFrom:
            configMapKeyRef:
              key: websocket-enabled
              name: vaultwarden
        resources:
          limits:
            memory: "128Mi"
            cpu: "500m"
          requests:
            memory: "32Mi"
            cpu: "100m"
        ports:
        - containerPort: 80
          name: http
        - containerPort: 3012
          name: ws
        volumeMounts:
          - mountPath: /data
            name: data