k3s/services/vaultwarden/vaultwarden-deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    kompose.cmd: kompose convert -f compose.yaml
    kompose.version: 1.38.0 (HEAD)
  labels:
    io.kompose.service: vaultwarden
  name: vaultwarden
spec:
  selector:
    matchLabels:
      io.kompose.service: vaultwarden
  strategy:
    type: Recreate
  template:
    metadata:
      annotations:
        kompose.cmd: kompose convert -f compose.yaml
        kompose.version: 1.38.0 (HEAD)
      labels:
        io.kompose.service: vaultwarden
    spec:
      containers:
        - env:
            - name: SIGNUPS_ALLOWED
              value: "false"
            - name: WEBSOCKET_ENABLED
              value: "true"
          image: vaultwarden/server:latest
          name: vaultwarden
          ports:
            - containerPort: 80
              protocol: TCP
              name: http
          securityContext:
            runAsGroup: 1000
            runAsUser: 1000
          volumeMounts:
            - mountPath: /data
              name: vaultwarden-volume
      restartPolicy: Always
      volumes:
        - name: vaultwarden-volume
          persistentVolumeClaim:
            claimName: vaultwarden-data-pvc
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: vaultwarden-data-pvc
  labels:
    recurring-job.longhorn.io/source: "enabled"
    recurring-job-group.longhorn.io/app-config-group: "enabled"
spec:
  accessModes:
    - ReadWriteOnce
  storageClassName: longhorn
  resources:
    requests:
      storage: 40Mi