apiVersion: apps/v1
kind: Deployment
metadata:
  name: synapse
  namespace: synapse
spec:
  replicas: 1
  selector:
    matchLabels:
      app: synapse
  template:
    metadata:
      labels:
        app: synapse
    spec:
      securityContext:
        fsGroup: 991
      containers:
        - name: synapse
          image: ghcr.io/element-hq/synapse:v1.119.0
          ports:
            - containerPort: 8008
            - containerPort: 9009
          volumeMounts:
            - mountPath: "/data"
              name: synapse-data
            - mountPath: "/data/homeserver.yaml"
              name: synapse-config-file
              subPath: homeserver.yaml
            - mountPath: "/data/matrix.halis.io.log.config"
              name: synapse-log-config-file
              subPath: matrix.halis.io.log.config
            - mountPath: "/data/double-puppeting.yaml"
              name: synapse-secret-doublepuppeting
              subPath: double-puppeting.yaml
            - mountPath: "/data/signal.yaml"
              name: signal-secret-registration
              subPath: signal.yaml
            - mountPath: "/data/messenger.yaml"
              name: messenger-secret-registration
              subPath: messenger.yaml
      volumes:
        - name: synapse-data
          persistentVolumeClaim:
            claimName: synapse-pvc
        - name: synapse-config-file
          secret:
            secretName: synapse-secret-config
        - name: synapse-log-config-file
          configMap:
            name: synapse-config
        - name: synapse-secret-doublepuppeting
          secret:
            secretName: synapse-secret-doublepuppeting
        - name: signal-secret-registration
          secret:
            secretName: signal-secret-registration
        - name: messenger-secret-registration
          secret:
            secretName: messenger-secret-registration