initial commit

Signed-off-by: Robert Günzler <r@gnzler.io>

1 files changed, 41 insertions, 0 deletions

diff --git a/bundles/vaultwarden/files/kube.yaml b/bundles/vaultwarden/files/kube.yaml
new file mode 100644
index 0000000..edb0b9b
--- /dev/null
+++ b/bundles/vaultwarden/files/kube.yaml
@@ -0,0 +1,41 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: vaultwarden
+  labels:
+    traefik.enable: true
+    traefik.http.routers.vaultwarden.tls: true
+    traefik.http.routers.vaultwarden.tls.certresolver: le
+    traefik.http.routers.vaultwarden.entrypoints: http,https
+    traefik.http.routers.vaultwarden.rule: Host(`vault.gzr.im`)
+    traefik.http.routers.vaultwarden.service: vaultwarden
+    traefik.http.services.vaultwarden.loadbalancer.server.port: 80
+    # TODO: metrics -> https://github.com/Tricked-dev/vwmetrics
+spec:
+  restartPolicy: Never
+  dnsPolicy: Default
+  containers:
+    - name: vaultwarden
+      image: ghcr.io/dani-garcia/vaultwarden:1.34.1-alpine
+      volumeMounts:
+        - name: data
+          mountPath: /data
+      ports:
+        - containerPort: 80
+          protocol: TCP
+      # livenessProbe:
+      #   httpGet:
+      #     path: /healthz
+      #     port: http
+      resources:
+        requests:
+          cpu: 50m
+          memory: 40Mi
+        limits:
+          cpu: 100m
+          memory: 128Mi
+  volumes:
+  - name: data
+    hostPath:
+      path: /var/lib/vaultwarden
+      type: DirectoryOrCreate