apiVersion: apps/v1
kind: Deployment
metadata:
  name: app
spec:
  template:
    spec:
      tolerations:
        - key: "public"
          operator: "Equal"
          value: "true"
          effect: "NoSchedule"
      affinity:
        nodeAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
            - weight: 100
              preference:
                matchExpressions:
                  - key: public
                    operator: In
                    values:
                      - "true"
      containers:
        - name: umami
          image: ghcr.io/umami-software/umami:postgresql-latest
          envFrom:
            - configMapRef:
                name: umami-config
          env:
            - name: SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: umami-secrets
                  key: UMAMI_APP_SECRET
            - name: DATABASE_URL
              valueFrom:
                secretKeyRef:
                  name: umami-secrets
                  key: UMAMI_POSTGRESQL_CONNECTION
          ports:
            - containerPort: 3000
              name: umami