apiVersion: apps/v1
kind: Deployment
metadata:
    name: vaultwarden
    namespace: vaultwarden
spec:
    replicas: 1
    selector:
        matchLabels:
            app: vaultwarden
    template:
        metadata:
            labels:
                app: vaultwarden
        spec:
            hostname: vaultwarden
            subdomain: vaultwarden
            containers:
              - name: vaultwarden
                image: vaultwarden/server
                ports:
                  - containerPort: 80
                env:
                  - name: DB_PASSWORD
                    valueFrom:
                      secretKeyRef:
                        name: vaultwarden.vaultwarden.credentials.postgresql.acid.zalan.do
                        key: password
                  - name: SIGNUPS_ALLOWED
                    value: "true"
                  - name: DATABASE_URL
                    value: "postgresql://vaultwarden:$(DB_PASSWORD)@vaultwarden.vaultwarden.svc.cluster.local:5432/vaultwarden"
                  - name: ADMIN_TOKEN
                    valueFrom:
                      secretKeyRef:
                        name: vaultwarden-admin
                        key: token
            volumes:
              - name: vaultwarden-pv
                hostPath:
                  path: "/mnt/vaultwarden"