apiVersion: apps/v1
kind: Deployment
metadata:
  name: karakeep
  namespace: karakeep
spec:
  replicas: 1
  strategy:
    # single-writer SQLite (db.db, queue.db) on a ReadWriteOnce volume
    type: Recreate
  selector:
    matchLabels:
      app: karakeep
  template:
    metadata:
      labels:
        app: karakeep
    spec:
      containers:
        - name: karakeep
          image: ghcr.io/karakeep-app/karakeep:0.33.2
          env:
            - name: DATA_DIR
              value: /data
            - name: PORT
              value: "3000"
            - name: NODE_ENV
              value: production
            - name: NEXT_TELEMETRY_DISABLED
              value: "1"
            - name: MEILI_ADDR
              value: http://karakeep-meilisearch:7700
            - name: BROWSER_WEB_URL
              value: http://karakeep-chrome:9222
            # Was http://localhost:14592 on CasaOS; must be the public URL so
            # NextAuth builds correct callback links behind the proxy.
            - name: NEXTAUTH_URL
              value: https://keep.wittyoneoff.com
            - name: NEXTAUTH_URL_INTERNAL
              value: http://localhost:3000
            - name: MEILI_MASTER_KEY
              valueFrom:
                secretKeyRef:
                  name: karakeep
                  key: meili-master-key
            - name: NEXTAUTH_SECRET
              valueFrom:
                secretKeyRef:
                  name: karakeep
                  key: nextauth-secret
            - name: OPENAI_API_KEY
              valueFrom:
                secretKeyRef:
                  name: karakeep
                  key: openai-api-key
          ports:
            - containerPort: 3000
              name: http
          readinessProbe:
            httpGet:
              path: /
              port: 3000
            initialDelaySeconds: 20
            periodSeconds: 10
          resources:
            requests:
              cpu: 100m
              memory: 256Mi
            limits:
              memory: 1Gi
          volumeMounts:
            - name: data
              mountPath: /data
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: karakeep