apiVersion: apps/v1
kind: Deployment
metadata:
  name: {{ include "bitwarden-lite.fullname" . }}
spec:
  replicas: {{ .Values.replicaCount }}
  selector:
    matchLabels:
      app: {{ include "bitwarden-lite.fullname" . }}
  template:
    metadata:
      labels:
        app: {{ include "bitwarden-lite.fullname" . }}
    spec:
      containers:
        - name: bitwarden
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
          ports:
            - name: http
              containerPort: 8080
          env:
            - name: BW_DB_SERVER
              value: {{ .Values.database.host | quote }}
            - name: BW_DB_USERNAME
              value: {{ .Values.database.user | quote }}
            - name: BW_DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: {{ .Values.postgresql.auth.existingSecret }}
                  key: {{ .Values.postgresql.auth.secretKeys.userPasswordKey | quote }}
            - name: BW_DB_DATABASE
              value: {{ .Values.database.name | quote }}
            - name: BW_DB_PROVIDER
              value: "postgresql"
            - name: BW_DOMAIN
              value: {{ .Values.bitwarden.domain | quote }}
            - name: globalSettings__hibpApiKey
              value: {{ .Values.hibp.apiKey | quote }}
            - name: BW_INSTALLATION_ID
              value: {{ .Values.bitwarden.installation.id | quote }}
            - name: BW_INSTALLATION_KEY
              value: {{ .Values.bitwarden.installation.key | quote }}
          envFrom:
            - secretRef:
                name: bitwarden-smtp
          volumeMounts:
            - name: data
              mountPath: /data
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: {{ default (printf "%s-data" (include "bitwarden-lite.fullname" .)) .Values.persistence.existingClaim }}