apiVersion: v1
kind: Pod
metadata:
  name: vaultwarden
  labels:
    traefik.enable: true
    traefik.http.routers.vaultwarden.tls: true
    traefik.http.routers.vaultwarden.tls.certresolver: le
    traefik.http.routers.vaultwarden.entrypoints: http,https
    traefik.http.routers.vaultwarden.rule: Host(`vault.gzr.im`)
    traefik.http.routers.vaultwarden.service: vaultwarden
    traefik.http.services.vaultwarden.loadbalancer.server.port: 80
    # TODO: metrics -> https://github.com/Tricked-dev/vwmetrics
spec:
  restartPolicy: Never
  dnsPolicy: Default
  containers:
    - name: vaultwarden
      image: ghcr.io/dani-garcia/vaultwarden:${version}-alpine
      volumeMounts:
        - name: data
          mountPath: /data
      ports:
        - containerPort: 80
          protocol: TCP
      # livenessProbe:
      #   httpGet:
      #     path: /healthz
      #     port: http
      resources:
        requests:
          cpu: 50m
          memory: 40Mi
        limits:
          cpu: 100m
          memory: 128Mi
  volumes:
  - name: data
    hostPath:
      path: /var/lib/vaultwarden
      type: DirectoryOrCreate