apiVersion: apps/v1
kind: Deployment
metadata:
  name: proton-bridge
  annotations:
    keel.sh/policy: "all"
    keel.sh/match-tag: "true"
    keel.sh/schedule: "0 3 * * *"
spec:
  replicas: 1
  selector:
    matchLabels:
      app: proton-bridge
  template:
    metadata:
      labels:
        app: proton-bridge
    spec:
      nodeSelector:
        kubernetes.io/arch: amd64
      # The initContainer runs first, scrubs the broken update, and locks the folder
      initContainers:
        - name: disable-auto-update
          image: busybox:latest
          command: 
            - "/bin/sh"
            - "-c"
            - |
              mkdir -p /root/.local/share/protonmail/bridge-v3/updates
              rm -rf /root/.local/share/protonmail/bridge-v3/updates/*
              chmod 555 /root/.local/share/protonmail/bridge-v3/updates
          volumeMounts:
            - name: bridge-data
              mountPath: /root
      containers:
        - name: bridge
          image: shenxn/protonmail-bridge:latest
          ports:
            - containerPort: 25
              name: smtp
            - containerPort: 143
              name: imap
          volumeMounts:
            - name: bridge-data
              mountPath: /root
      volumes:
        - name: bridge-data
          persistentVolumeClaim:
            claimName: proton-bridge-data