apiVersion: apps/v1
kind: Deployment
metadata:
  name: mealie
spec:
  selector:
    matchLabels:
      app: mealie
  template:
    metadata:
      labels:
        app: mealie
    spec:
      containers:
        - name: mealie
          image: ghcr.io/mealie-recipes/mealie:latest
          resources:
            limits:
              memory: "500Mi"
              cpu: "500m"
          ports:
            - containerPort: 9000
          volumeMounts:
            - mountPath: /app/data
              name: mealie-pvc
          env:
            - name: ALLOW_SIGNUP
              value: "false"
            - name: PUID
              value: "1000"
            - name: PGID
              value: "1000"
            - name: TZ
              value: Europe/London
            - name: BASE_URL
              value: <mealie base url>
            - name: DB_ENGINE
              value: postgres
            - name: POSTGRES_USER
              valueFrom:
                secretKeyRef:
                  name: mealie-db
                  key: username
            - name: POSTGRES_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: mealie-db
                  key: password
            - name: POSTGRES_SERVER
              value: mealie-db
            - name: POSTGRES_PORT
              value: "5432"
            - name: POSTGRES_DB
              value: mealie
            # - name: OIDC_AUTH_ENABLED
            #   value: "true"
            # - name: OIDC_SIGNUP_ENABLED
            #   value: "true"
            # - name: OIDC_CONFIGURATION_URL
            #   value: <oidc config url>
            # - name: OIDC_CLIENT_ID
            #   valueFrom:
            #     secretKeyRef:
            #       name: mealie-oidc
            #       key: client-id
            # - name: OIDC_CLIENT_SECRET
            #   valueFrom:
            #     secretKeyRef:
            #       name: mealie-oidc
            #       key: client-secret
            # - name: OIDC_ADMIN_GROUP
            #   valueFrom:
            #     secretKeyRef:
            #       name: mealie-oidc
            #       key: admin-group
            # - name: OIDC_AUTO_REDIRECT
            #   value: "false"
            # - name: OIDC_PROVIDER_NAME
            #   value: <provider name>
      volumes:
        - name: mealie-pvc
          persistentVolumeClaim:
            claimName: mealie
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: mealie
spec:
  resources:
    requests:
      storage: 1G
  volumeMode: Filesystem
  accessModes:
    - ReadWriteOnce