apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: headscale
spec:
  template:
    metadata:
      labels:
        app: headscale
    spec:
      hostNetwork: true
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: headscale
        - name: certs
          secret:
            secretName: wetofu-me-certs
        - name: config
          configMap:
            name: headscale
      containers:
        - name: headscale
          image: ghcr.io/juanfont/headscale
          args:
            - serve
          volumeMounts:
            - name: data
              mountPath: /var/lib/headscale
            - name: certs
              mountPath: /certs
            - name: config
              mountPath: /etc/headscale
  selector:
    matchLabels:
      app: headscale