# Secret paperless-ai-config managed via SOPS (argocd/secrets/paperless-ai-secrets.enc.yaml)
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: paperless-ai
  namespace: paperless
  labels:
    app.kubernetes.io/name: paperless-ai
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: paperless-ai
  template:
    metadata:
      labels:
        app.kubernetes.io/name: paperless-ai
    spec:
      tolerations:
        - key: node-role.kubernetes.io/control-plane
          operator: Exists
          effect: NoSchedule
      containers:
        - name: paperless-ai
          image: clusterzx/paperless-ai:latest
          env:
            # Paperless-ngx connection
            - name: PAPERLESS_API_URL
              value: "http://paperless.paperless.svc.cluster.local:8000"
            - name: PAPERLESS_API_TOKEN
              valueFrom:
                secretKeyRef:
                  name: paperless-ai-config
                  key: PAPERLESS_API_TOKEN
            # LLM API — local gateway, no auth required (phase 3 not built yet)
            - name: AI_PROVIDER
              value: "custom"
            - name: CUSTOM_BASE_URL
              value: "http://api-gateway.api.svc.cluster.local:8080/v1"
            - name: CUSTOM_API_KEY
              value: "not-required"
            - name: CUSTOM_MODEL
              value: "reasoning"
            # Behavior
            - name: SCAN_INTERVAL
              value: "300"
            - name: PROCESS_PREDEFINED_DOCUMENTS
              value: "no"
            - name: ADD_AI_TAG
              value: "yes"
            - name: AI_TAG_NAME
              value: "ai-processed"
            - name: USE_PROMPT_TAGS
              value: "yes"
          resources:
            requests:
              cpu: 50m
              memory: 128Mi
            limits:
              cpu: 500m
              memory: 512Mi