apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: vaultwarden
  name: vaultwarden
spec:
  replicas: 1
  selector:
    matchLabels:
      app: vaultwarden
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: vaultwarden
    spec:
      containers:
        - env:
            - name: ADMIN_RATELIMIT_MAX_BURST
              value: "2"
            - name: ADMIN_RATELIMIT_SECONDS
              value: "60"
            - name: ADMIN_TOKEN
              value: '"AIRN*hup*twed@grif6prud"'
            - name: DOMAIN
              value: https://warden.strudelline.net
            - name: EMERGENCY_ACCESS_ALLOWED
              value: "true"
            - name: IP_HEADER
              value: X-Forwarded-For
            - name: LOGIN_RATELIMIT_MAX_BURST
              value: "2"
            - name: LOGIN_RATELIMIT_SECONDS
              value: "30"
            - name: SENDS_ALLOWED
              value: "true"
            - name: SIGNUPS_ALLOWED
              value: "true"
            - name: SIGNUPS_DOMAINS_WHITELIST
              value: strudelline.net,werts.us,brechy.net,andariese.net
            - name: SIGNUPS_VERIFY
              value: "true"
            - name: SIGNUPS_VERIFY_RESEND_LIMIT
              value: "5"
            - name: SIGNUPS_VERIFY_RESEND_TIME
              value: "3600"
            - name: SMTP_AUTH_MECHANISM
              value: '"Login"'
            - name: SMTP_FROM
              value: vaultwarden@strudelline.net
            - name: SMTP_FROM_NAME
              value: vaultwarden
            - name: SMTP_HOST
              value: smtp.mailgun.org
            - name: SMTP_PASSWORD
              value: 5d83cb4fad5c81fe3a9bb952a3fba23a-81bd92f8-d226d236
            - name: SMTP_PORT
              value: "465"
            - name: SMTP_SECURITY
              value: force_tls
            - name: SMTP_USERNAME
              value: vaultwarden@strudelline.net
            - name: WEB_VAULT_ENABLED
              value: "true"
          image: vaultwarden/server:1.28.1
          name: vaultwarden
          resources: {}
          volumeMounts:
            - mountPath: /data
              name: vaultwarden-data
      restartPolicy: Always
      volumes:
        - name: vaultwarden-data
          persistentVolumeClaim:
            claimName: vaultwarden-data