apiVersion: apps/v1
kind: Deployment
metadata:
  name: app
spec:
  template:
    spec:
      containers:
        - name: linkwarden
          image: ghcr.io/linkwarden/linkwarden:v2.9.1
          envFrom:
            - configMapRef:
                name: linkwarden-config
          env:
            # Consume the secret
            - name: DATABASE_URL
              valueFrom:
                secretKeyRef:
                  name: linkwarden-secrets
                  key: DATABASE_URL
                  optional: false
            - name: NEXTAUTH_SECRET
              valueFrom:
                secretKeyRef:
                  name: linkwarden-secrets
                  key: NEXTAUTH_SECRET
                  optional: false
            - name: AUTHENTIK_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: linkwarden-secrets
                  key: AUTHENTIK_CLIENT_SECRET
                  optional: false
            - name: EMAIL_SERVER
              valueFrom:
                secretKeyRef:
                  name: smtp-secrets
                  key: SMTP_SERVER
                  optional: false
          ports:
            - containerPort: 3000
              protocol: TCP
              name: linkwarden
          resources:
            requests:
              cpu: 250m
              memory: 512Mi
          # Mount the volume
          volumeMounts:
            - mountPath: /data/data
              name: linkwarden
              subPath: "data"
      restartPolicy: Always
      volumes:
        - name: linkwarden
          persistentVolumeClaim:
            claimName: linkwarden-pvc