---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: vaultwarden-data
  namespace: media
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 10Gi
  storageClassName: local-path
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: vaultwarden
  namespace: media
spec:
  replicas: 1
  selector:
    matchLabels:
      app: vaultwarden
  template:
    metadata:
      labels:
        app: vaultwarden
    spec:
      nodeSelector:
        kubernetes.io/hostname: qfox-1
      containers:
        - name: vaultwarden
          image: vaultwarden/server:latest
          ports:
            - containerPort: 80
          env:
            - name: SIGNUPS_ALLOWED
              value: "true"
            - name: DOMAIN
              value: "https://vault.researchstack.info"
          volumeMounts:
            - name: data
              mountPath: /data
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: vaultwarden-data
---
apiVersion: v1
kind: Service
metadata:
  name: vaultwarden
  namespace: media
spec:
  type: NodePort
  ports:
    - port: 80
      targetPort: 80
      nodePort: 30106
  selector:
    app: vaultwarden
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: vaultwarden-api
  namespace: media
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 1Gi
  storageClassName: local-path
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: vaultwarden-api
  namespace: media
spec:
  replicas: 1
  selector:
    matchLabels:
      app: vaultwarden-api
  template:
    metadata:
      labels:
        app: vaultwarden-api
    spec:
      nodeSelector:
        kubernetes.io/hostname: qfox-1
      containers:
        - name: api
          image: ghcr.io/turbootzz/vaultwarden-api:latest
          ports:
            - containerPort: 8080
          env:
            - name: VAULTWARDEN_URL
              value: "http://vaultwarden:80"
            - name: VAULTWARDEN_EMAIL
              value: "secrets@researchstack.info"
            - name: VAULTWARDEN_PASSWORD
              value: "RY03KhsFez73K5va2uUb"
            - name: API_KEY
              value: "RY03KhsFez73K5va2uUb-vaultwarden-api-key"
            - name: ENVIRONMENT
              value: "production"
          volumeMounts:
            - name: data
              mountPath: /data
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: vaultwarden-api
---
apiVersion: v1
kind: Service
metadata:
  name: vaultwarden-api
  namespace: media
spec:
  type: NodePort
  ports:
    - port: 8080
      targetPort: 8080
      nodePort: 30107
  selector:
    app: vaultwarden-api