feat: deploy Bitwarden vault to security namespace

deployments/bitwarden/deployment.yaml

@@ -20,18 +20,23 @@ spec:
           image: bitwarden/server:latest
           ports:
             - containerPort: 80
+              name: http
           env:
-            - name: BW_ADMIN_DOMAIN
-              value: bitwarden.khalisio.com
-            - name: WEBSOCKETS_ENABLED
-              value: "true"
             - name: SIGNUPS_ALLOWED
+              value: "false"
+            - name: DATABASE_TYPE
+              value: sqlite
+            - name: DATABASE_FILE
+              value: /bitwarden/data/bitwarden.db
+            - name: WEB_VAULT_ENABLE
+              value: "true"
+            - name: API_ENABLED
+              value: "true"
+            - name: IDENTITY_ENABLED
               value: "true"
-            - name: DOMAIN
-              value: https://bitwarden.khalisio.com
           volumeMounts:
             - name: bitwarden-data
-              mountPath: /data
+              mountPath: /bitwarden/data
           resources:
             requests:
               cpu: 100m

deployments/bitwarden/ingress.yaml

@@ -5,7 +5,6 @@ metadata:
   namespace: security
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
-    traefik.ingress.kubernetes.io/router.entrypoints: websecure
 spec:
   ingressClassName: traefik
   tls:

deployments/bitwarden/namespace.yaml

@@ -3,5 +3,5 @@ kind: Namespace
 metadata:
   name: security
   labels:
-    app.kubernetes.io/name: security
+    app.kubernetes.io/name: bitwarden
     app.kubernetes.io/managed-by: orion

deployments/bitwarden/pvc.yaml

@@ -3,9 +3,10 @@ kind: PersistentVolumeClaim
 metadata:
   name: bitwarden-data
   namespace: security
+  labels:
+    app: bitwarden
 spec:
-  accessModes:
+  accessModes: [ReadWriteOnce]
-    - ReadWriteOnce
   storageClassName: longhorn
   resources:
     requests:

deployments/bitwarden/service.yaml

@@ -3,6 +3,8 @@ kind: Service
 metadata:
   name: bitwarden
   namespace: security
+  labels:
+    app: bitwarden
 spec:
   selector:
     app: bitwarden
@@ -10,4 +12,5 @@ spec:
     - name: http
       port: 80
       targetPort: 80
+      protocol: TCP
   type: ClusterIP