apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: oauth2-proxy
  name: oauth2-proxy
  namespace: default
spec:
  replicas: 1
  selector:
    matchLabels:
      app: oauth2-proxy
  template:
    metadata:
      labels:
        app: oauth2-proxy
    spec:
      containers:
      - name: oauth2-proxy
        image: quay.io/oauth2-proxy/oauth2-proxy:v7.6.0
        ports:
        - containerPort: 4180
          protocol: TCP
          name: proxy-port
        env:
        - name: OAUTH2_PROXY_PROVIDER
          value: "keycloak-oidc"
        - name: OAUTH2_PROXY_PROVIDER_DISPLAY_NAME
          value: "Keycloak"
        - name: OAUTH2_PROXY_CLIENT_ID
          valueFrom:
            secretKeyRef:
              name: navigation-secrets
              key: OIDC_CLIENT_ID
        - name: OAUTH2_PROXY_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              name: navigation-secrets
              key: OIDC_CLIENT_SECRET
        - name: OAUTH2_PROXY_COOKIE_SECRET
          valueFrom:
            secretKeyRef:
              name: navigation-secrets
              key: OAUTH2_PROXY_COOKIE_SECRET
        - name: OAUTH2_PROXY_UPSTREAMS
          value: "file:///dev/null"
        - name: OAUTH2_PROXY_HTTP_ADDRESS
          value: "0.0.0.0:4180"
        - name: OAUTH2_PROXY_REDIRECT_URL
          value: "https://migrate.mynest.love/oauth2/callback"
        - name: OAUTH2_PROXY_OIDC_ISSUER_URL
          value: "https://sso.mynest.love/realms/nest"
        - name: OAUTH2_PROXY_COOKIE_DOMAINS
          value: "migrate.mynest.love"
        - name: OAUTH2_PROXY_WHITELIST_DOMAINS
          value: "migrate.mynest.love"
        - name: OAUTH2_PROXY_COOKIE_SECURE
          value: "true"
        - name: OAUTH2_PROXY_EMAIL_DOMAINS
          value: "*"
        - name: OAUTH2_PROXY_SKIP_JWT_BEARER_TOKENS
          value: "true"
        - name: OAUTH2_PROXY_EXTRA_JWT_ISSUERS
          value: "https://sso.mynest.love/realms/nest=account"
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: valhalla
  name: valhalla
  namespace: default
spec:
  replicas: 1
  selector:
    matchLabels:
      app: valhalla
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: valhalla
    spec:
      containers:
      - name: valhalla
        image: ghcr.io/valhalla/valhalla:latest
        ports:
        - containerPort: 8002
          protocol: TCP
          name: valhalla-port
        env:
        - name: TZ
          value: America/New_York
        - name: tile_urls
          value: "https://download.geofabrik.de/north-america/us/maryland-latest.osm.pbf"
        - name: build_elevation
          value: "True"
        - name: serve_tiles
          value: "True"
        - name: force_rebuild
          value: "False"
        volumeMounts:
        - mountPath: /custom_files
          name: valhalla-storage
      volumes:
      - name: valhalla-storage
        persistentVolumeClaim:
          claimName: valhalla-data-pvc
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: tileserver
  name: tileserver
  namespace: default
spec:
  replicas: 1
  selector:
    matchLabels:
      app: tileserver
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: tileserver
    spec:
      containers:
      - name: tileserver
        image: maptiler/tileserver-gl:latest
        ports:
        - containerPort: 8080
          protocol: TCP
          name: tileserver-port
        volumeMounts:
        - mountPath: /data
          name: tileserver-storage
      volumes:
      - name: tileserver-storage
        persistentVolumeClaim:
          claimName: tileserver-data-pvc
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: photon
  name: photon
  namespace: default
spec:
  replicas: 1
  selector:
    matchLabels:
      app: photon
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: photon
    spec:
      containers:
      - name: photon
        image: komoot/photon:latest
        ports:
        - containerPort: 2322
          protocol: TCP
          name: photon-port
        volumeMounts:
        - mountPath: /photon/photon_data
          name: photon-storage
      volumes:
      - name: photon-storage
        persistentVolumeClaim:
          claimName: photon-data-pvc