---
apiVersion: v1
kind: Secret
metadata:
  name: nefarious-admin
  annotations:
    secret-generator.v1.mittwald.de/autogenerate: password
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: nefarious
  labels:
    app: nefarious
spec:
  replicas: 1
  selector:
    matchLabels:
      app: nefarious
  template:
    metadata:
      labels:
        app: nefarious
        name: nefarious
    spec:
      containers:
      - name: nefarious
        image: lardbit/nefarious
        imagePullPolicy: Always
        env:
        - name: NEFARIOUS_USER
          value: "admin"
        - name: NEFARIOUS_PASS
          valueFrom:
            secretKeyRef:
              key: password
              name: nefarious-admin
        - name: DATABASE_URL
          value: "sqlite:////nefarious-db/db.sqlite3"
        - name: REDIS_HOST
          value: "redis"
        - name: REDIS_PORT
          value: "6379"
        - name: HOST_DOWNLOAD_PATH
          value: "/downloads"
        - name: CONFIG_PATH
          value: "/nefarious-db"
        - name: INTERNAL_DOWNLOAD_PATH
          value: "/downloads"
        volumeMounts:
        - name: nefarious-persistent-storage
          mountPath: /nefarious-db
          subPath: backup/nefarious/nefarious-db
        - name: nefarious-persistent-storage
          mountPath: /downloads
          subPath: nobackup/downloads
      volumes:
      - name: nefarious-persistent-storage
        persistentVolumeClaim:
          claimName: homey-pvc-nfs
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: celery
  labels:
    app: celery
spec:
  replicas: 1
  selector:
    matchLabels:
      app: celery
  template:
    metadata:
      labels:
        app: celery
        name: celery
    spec:
      containers:
      - name: celery
        image: lardbit/nefarious
        imagePullPolicy: Always
        command: ["/app/entrypoint-celery.sh"]
        env:
        - name: DATABASE_URL
          value: "sqlite:////nefarious-db/db.sqlite3"
        - name: REDIS_HOST
          value: "redis"
        - name: REDIS_URL
          value: "redis://redis:6379/"
        - name: REDIS_PORT
          value: "6379"
        - name: REDIS_DB
          value: "0"
        - name: HOST_DOWNLOAD_PATH
          value: "/downloads"
        - name: INTERNAL_DOWNLOAD_PATH
          value: "/downloads"
        volumeMounts:
        - name: celery-persistent-storage
          mountPath: /nefarious-db
          subPath: backup/nefarious/nefarious-db
        - name: celery-persistent-storage
          mountPath: /downloads
          subPath: nobackup/downloads
      volumes:
      - name: celery-persistent-storage
        persistentVolumeClaim:
          claimName: homey-pvc-nfs
---
apiVersion: v1
kind: Service
metadata:
  name: nefarious
spec:
  selector:
    app: nefarious
  ports:
  - port: 80
    targetPort: 80
    name: nefarious
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: nefarious-ingress
  annotations:
spec:
  rules:
   - host: nefarious.{{ .Values.homey.internal_url }}
     http:
       paths:
       - path: /
         pathType: Prefix
         backend:
           service:
             name: nefarious
             port:
               number: 80