---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: vaultwarden
spec:
  selector:
    matchLabels:
      app: vaultwarden
  replicas: 1
  strategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: vaultwarden
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: kubernetes.io/arch
                operator: In
                values:
                - arm64
      containers:
        - name: vaultwarden
          image: vaultwarden/server
          env:
          - name: PUID
            value: "1000"
          - name: PGID
            value: "1000"
          - name: TZ
            value: "America/Toronto"
          - name: ADMIN_TOKEN
            valueFrom:
              secretKeyRef:
                name: vaultwarden-admin-pass
                key: ADMIN_TOKEN
          ports:
            - containerPort: 80
              name: "vaultwarden"
          volumeMounts:
            - name: vaultwarden
              mountPath: "/data"
      volumes:
        - name: vaultwarden
          persistentVolumeClaim:
            claimName: vaultwarden-pvc

# EOF