apiVersion: apps/v1
kind: Deployment
metadata:
  name: soulsolid
  namespace: arr
  labels:
    app.kubernetes.io/name: soulsolid
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: soulsolid
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app.kubernetes.io/name: soulsolid
    spec:
      containers:
        - env:
            - name: PGID
              value: "10"
            - name: PUID
              value: "1000"
            - name: TZ
              value: UTC
            - name: TELEGRAM_TOKEN
              valueFrom:
                secretKeyRef:
                  name: telegram-bot-secret
                  key: token
          name: soulsolid
          image: kikiattias/soulsolid-plugins:latest
          imagePullPolicy: Always
          # securityContext:
          #   allowPrivilegeEscalation: true
          #   capabilities: {}
          #   privileged: true
          #   readOnlyRootFilesystem: false
          ports:
            - containerPort: 3535
              protocol: TCP
          volumeMounts:
            - mountPath: /downloads
              name: nas-media-soulsolid-downloads-volume
            - mountPath: /music
              name: nas-media-soulsolid-music-volume
            - name: soulsolid-db
              mountPath: /app/db
            - name: soulsolid-config-yml
              mountPath: /app/config.yaml
              subPath: config.yaml
      restartPolicy: Always
      volumes:
        - name: nas-media-soulsolid-downloads-volume
          hostPath:
            path: "/mnt/ugreen-media/soulsolid/downloads"
            type: DirectoryOrCreate
        - name: nas-media-soulsolid-music-volume
          hostPath:
            path: "/mnt/ugreen-media/soulsolid/music"
            type: DirectoryOrCreate
        - name: soulsolid-db
          persistentVolumeClaim:
            claimName: soulsolid-db-pvc
        - configMap:
            name: soulsolid-config-cm
          name: soulsolid-config-yml