apiVersion: v1
kind: Pod
metadata:
  name: copyparty
  labels:
    traefik.enable: true
    traefik.http.routers.copyparty.tls: true
    traefik.http.routers.copyparty.tls.certresolver: le
    traefik.http.routers.copyparty.entrypoints: http,https
    traefik.http.routers.copyparty.rule: Host(`cp.gzr.im`) || Host(`cp.demo.gzr.im`)
    traefik.http.routers.copyparty.service: copyparty
    traefik.http.routers.copyparty.middlewares: tls-redirect@file,authelia@file
    traefik.http.services.copyparty.loadbalancer.server.port: 3923
spec:
  dnsPolicy: Default
  containers:
    - name: copyparty
      image: ghcr.io/9001/copyparty-${edition}:${version}
      env:
        - name: LD_PRELOAD
          value: /usr/lib/libmimalloc-secure.so.2
        - name: PYTHONUNBUFFERED
          value: 1
        - name: PRTY_NO_CFSSL
          value: 1
        - name: PRTY_NO_PARAMIKO
          value: 1
        - name: PRTY_NO_PARTFTPY
          value: 1
        - name: PRTY_NO_PYFTPD
          value: 1
      volumeMounts:
        - name: config
          mountPath: /cfg
        - name: webroot
          mountPath: /w
        # mount host paths we want to expose
        - name: var-www
          mountPath: /host/var/www
      ports:
        - containerPort: 3923
          protocol: TCP
      # livenessProbe:
      #   exec:
      #     command: ["wget", "--spider", "-q", "127.0.0.1:3923/?reset=/._"]
      #     initialDelaySeconds: 15s
      resources:
        limits:
          cpu: 100m
          memory: 128Mi
  volumes:
    - name: config
      hostPath:
        path: /var/lib/copyparty/cfg
        type: DirectoryOrCreate
    - name: webroot
      hostPath:
        path: /var/www/copyparty
        type: DirectoryOrCreate
    # other host paths
    - name: var-www
      hostPath:
        path: /var/www
        type: Directory