apiVersion: v1
kind: ConfigMap
metadata:
  name: paperless
data:
  PAPERLESS_PORT: 8000
  PAPERLESS_URL: https://paper.gzr.im
  PAPERLESS_REDIS: redis://localhost:6379
  PAPERLESS_DATA_DIR: /paperless/data
  PAPERLESS_MEDIA_ROOT: /paperless/media
  PAPERLESS_CONSUMPTION_DIR: /paperless/inbox
  # use authelia
  PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect
  PAPERLESS_LOGOUT_REDIRECT_URL: https://login.gzr.im/logout
  PAPERLESS_DISABLE_REGULAR_LOGIN: true
  PAPERLESS_REDIRECT_LOGIN_TO_SSO: true
  # monitoring
  # PAPERLESS_ENABLE_FLOWER: true
---
apiVersion: v1
kind: Pod
metadata:
  name: paperless
  labels:
    traefik.enable: true
    traefik.http.routers.paperless.tls: true
    traefik.http.routers.paperless.tls.certresolver: le
    traefik.http.routers.paperless.entrypoints: http,https
    traefik.http.routers.paperless.rule: Host(`paper.gzr.im`)
    traefik.http.routers.paperless.service: paperless
    traefik.http.services.paperless.loadbalancer.server.port: 8000
    # metrics
    # traefik.http.routers.paperless-metrics.entrypoints: metrics
    # traefik.http.routers.paperless-metrics.rule: Path(`/metrics/paperless`)
    # traefik.http.routers.paperless-metrics.middlewares: replacepath-metrics@file
    # traefik.http.services.paperless-metrics.loadbalancer.server.port: 5555
spec:
  restartPolicy: Always
  dnsPolicy: Default
  containers:
    - name: paperless
      image: ghcr.io/paperless-ngx/paperless-ngx:${version}
      ports:
        - containerPort: 8000
          protocol: TCP
        # - containerPort: 5555
        #   protocol: TCP
      envFrom:
        - configMapRef:
            name: paperless
        - secretRef:
            name: paperless
      volumeMounts:
        - name: paperless-media
          mountPath: /paperless/media
        - name: paperless-inbox
          mountPath: /paperless/inbox
        - name: paperless-data
          mountPath: /paperless/data
      resources:
        limits:
          memory: 256Mi
      livenessProbe:
        httpGet:
          path: /
          port: 8000
        initialDelaySeconds: 30
        timeoutSeconds: 30

    - name: broker
      image: index.docker.io/library/redis:8
      ports:
        - containerPort: 6379
          protocol: TCP
      volumeMounts:
        - name: broker-data
          mountPath: /data
      resources:
        limits:
          cpu: 100m
          memory: 512Mi
      livenessProbe:
        exec:
          command: ["redis-cli", "--raw", "incr", "ping"]


  volumes:
    - name: paperless-data
      hostPath:
        path: /var/lib/paperless/data
        type: DirectoryOrCreate
    - name: paperless-inbox
      hostPath:
        path: /media/hayasui/documents/paperless-inbox
        type: Directory
    - name: paperless-media
      hostPath:
        path: /media/hayasui/documents/paperless
        type: Directory
    - name: broker-data
      hostPath:
        path: /var/lib/paperless/broker
        type: DirectoryOrCreate