apiVersion: apps/v1
kind: Deployment
metadata:
    name: vaultwarden
    namespace: vaultwarden
spec:
    replicas: 1
    selector:
        matchLabels:
            app: vaultwarden
    template:
        metadata:
            labels:
                app: vaultwarden
        spec:
            hostname: vaultwarden
            subdomain: vaultwarden
            containers:
              - name: vaultwarden
                image: vaultwarden/server:1.32.7
                ports:
                  - containerPort: 80
                env:
                  - name: DB_PASSWORD
                    valueFrom:
                      secretKeyRef:
                        name: vaultwarden-db
                        key: password
                  - name: SIGNUPS_ALLOWED
                    value: "true"
                  - name: DATABASE_URL
                    value: "postgresql://vaultwarden:$(DB_PASSWORD)@vaultwarden-db-rw.vaultwarden.svc.cluster.local:5432/vaultwarden"
                  - name: ADMIN_TOKEN
                    valueFrom:
                      secretKeyRef:
                        name: vaultwarden-admin
                        key: token
                volumeMounts:
                  - mountPath: "/data"
                    name: vaultwarden-data
            volumes:
              - name: vaultwarden-data
                persistentVolumeClaim:
                  claimName: vaultwarden-pvc