---
apiVersion: codemowers.cloud/v1beta1
kind: RedisClaim
metadata:
  name: wildduck
spec:
  class: ephemeral
  capacity: 100Mi
---
apiVersion: v1
kind: Service
metadata:
  name: wildduck-api
spec:
  selector:
    app.kubernetes.io/name: wildduck
    app.kubernetes.io/component: wildduck
  ports:
  - port: 8080
    name: wildduck-api
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: wildduck
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: wildduck
      app.kubernetes.io/component: wildduck
  template:
    metadata:
      labels:
        app.kubernetes.io/name: wildduck
        app.kubernetes.io/component: wildduck
    spec:
      containers:
        - name: wildduck
          image: docker.io/nodemailer/wildduck
          ports:
            - containerPort: 8080
              name: wildduck-api
            - containerPort: 9993
              name: wildduck-mda
          securityContext:
            readOnlyRootFilesystem: true
            runAsNonRoot: true
            runAsUser: 1000
          resources:
            limits:
              cpu: 500m
              memory: 200Mi
            requests:
              cpu: 10m
              memory: 100Mi
          env:
            - name: APPCONF_tls_key
              value: /cert/tls.key
            - name: APPCONF_tls_cert
              value: /cert/tls.crt
            - name: APPCONF_api_host
              value: "0.0.0.0"
            - name: APPCONF_api_accessToken
              valueFrom:
                secretKeyRef:
                  name: wildduck
                  key: WILDDUCK_API_TOKEN
            - name: APPCONF_dbs_mongo
              valueFrom:
                secretKeyRef:
                  name: wildduck
                  key: MONGO_URI
            - name: APPCONF_dbs_redis
              valueFrom:
                secretKeyRef:
                  name: redis-wildduck-owner-secrets
                  key: REDIS_MASTER_0_URI
          volumeMounts:
            - mountPath: /cert
              name: cert
      volumes:
        - name: cert
          secret:
            secretName: wildduck-tls