apiVersion: apps/v1
kind: Deployment
metadata:
  name: qbittorrentvpn
  namespace: stack-arr
spec:
  replicas: 1
  selector:
    matchLabels:
      app: qbittorrentvpn
  template:
    metadata:
      labels:
        app: qbittorrentvpn
    spec:
      imagePullSecrets:
      - name: regcred
      containers:
      - name: qbittorrentvpn
        image: binhex/arch-qbittorrentvpn:5
        securityContext:
          privileged: true   # necessário para manipular tun devices
        ports:
        - containerPort: 8080   # WebUI do qBittorrent
        - containerPort: 8118  
        - containerPort: 9118  
        - containerPort: 58946  
        env:
        - name: VPN_ENABLED
          value: "yes"
        - name: VPN_PROV
          valueFrom:
            secretKeyRef:
              name: vpn-secrets
              key: vpnprov
        - name: VPN_USER
          valueFrom:
            secretKeyRef:
              name: vpn-secrets
              key: username
        - name: VPN_PASS
          valueFrom:
            secretKeyRef:
              name: vpn-secrets
              key: password
        - name: VPN_CLIENT
          value: "openvpn"
        - name: ENABLE_STARTUP_SCRIPTS
          value: "no"
        - name: ENABLE_PRIVOXY
          value: "yes"
        - name: STRICT_PORT_FORWARD
          value: "yes"
        - name: USERSPACE_WIREGUARD
          value: "no"
        - name: ENABLE_SOCKS
          value: "no"
        - name: DEBUG
          value: "false"
        - name: WEBUI_PORT
          value: "8080"
        - name: UMASK
          value: "000"
        - name: PUID
          value: "1013"
        - name: PGID
          value: "1013"
        - name: LAN_NETWORK
          valueFrom:
            secretKeyRef:
              name: vpn-secrets
              key: lannetwork
        - name: NAME_SERVERS
          value: "1.1.1.1,8.8.8.8"
        volumeMounts:
        - name: config
          mountPath: /config
        - name: downloads
          mountPath: /data
      volumes:
      - name: config
        persistentVolumeClaim:
          claimName: qbittorrent-config-pvc
      - name: downloads
        persistentVolumeClaim:
          claimName: qbittorrent-downloads-pvc