k3s/services/vaultwarden/vaultwarden-deployment.yaml

42 lines
1,006 B
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: vaultwarden
annotations:
keel.sh/policy: "all"
keel.sh/match-tag: "true"
keel.sh/schedule: "0 3 * * *"
spec:
selector:
matchLabels:
app: vaultwarden
strategy:
type: Recreate
template:
metadata:
labels:
app: vaultwarden
spec:
containers:
- env:
- name: SIGNUPS_ALLOWED
value: "false"
- name: WEBSOCKET_ENABLED
value: "true"
image: vaultwarden/server:latest
name: vaultwarden
ports:
- containerPort: 80
protocol: TCP
name: http
securityContext:
runAsGroup: 1000
runAsUser: 1000
volumeMounts:
- mountPath: /data
name: vaultwarden-volume
restartPolicy: Always
volumes:
- name: vaultwarden-volume
persistentVolumeClaim:
claimName: vaultwarden-data-pvc