apiVersion: apps/v1
kind: Deployment
metadata:
  name: igotify
  namespace: notifications
  labels:
    app: igotify
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: igotify
  template:
    metadata:
      labels:
        app: igotify
    spec:
      containers:
        - name: igotify
          image: ghcr.io/androidseb25/igotify-notification-assist:v1.6.0.1
          ports:
            - containerPort: 8080
              protocol: TCP
          env:
            - name: ENABLE_CONSOLE_LOG
              value: "true"
            - name: ENABLE_SCALAR_UI
              value: "true"
            # The bridge authenticates with a Gotify client token, not with
            # ZITADEL. Gotify has no way to accept a forwarded identity, so the
            # token is the only credential that works server-side. The token
            # belongs to user `rock`, never expires, and is revoked by deleting
            # the client row in Gotify.
            - name: GOTIFY_URLS
              value: "https://gotify.riotpiao.com"
            - name: GOTIFY_CLIENT_TOKENS
              valueFrom:
                secretKeyRef: {name: igotify-client-token, key: client-token}
            # SECNTFY_TOKENS intentionally left unset: secntfy is not deployed.
          volumeMounts:
            - name: data
              mountPath: /app/data
          livenessProbe:
            httpGet:
              path: /Version
              port: 8080
            initialDelaySeconds: 10
            periodSeconds: 30
          readinessProbe:
            httpGet:
              path: /Version
              port: 8080
            initialDelaySeconds: 5
            periodSeconds: 10
          resources:
            requests:
              cpu: 50m
              memory: 64Mi
            limits:
              cpu: 200m
              memory: 128Mi
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: igotify-data