apiVersion: apps/v1
kind: Deployment
metadata:
  name: pelican-panel
  namespace: pelican
  labels:
    app.kubernetes.io/name: pelican
    app.kubernetes.io/component: panel
    app.kubernetes.io/managed-by: orion
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app.kubernetes.io/name: pelican
      app.kubernetes.io/component: panel
  template:
    metadata:
      labels:
        app.kubernetes.io/name: pelican
        app.kubernetes.io/component: panel
    spec:
      containers:
        - name: panel
          image: ghcr.io/pelican-dev/panel:latest
          ports:
            - name: http
              containerPort: 80
              protocol: TCP
          env:
            - name: APP_ENV
              value: production
            - name: APP_NAME
              value: "Pelican"
            - name: APP_URL
              value: "https://pelican.khalisio.com"
            - name: BEHIND_PROXY
              value: "true"
            - name: DB_CONNECTION
              value: pgsql
            - name: DB_HOST
              value: postgres.pelican.svc.cluster.local
            - name: DB_PORT
              value: "5432"
            - name: DB_DATABASE
              value: pelican
            - name: DB_USERNAME
              valueFrom:
                secretKeyRef:
                  name: pelican-panel-db
                  key: DB_USER
            - name: DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: pelican-panel-db
                  key: DB_PASSWORD
            - name: APP_KEY
              valueFrom:
                secretKeyRef:
                  name: pelican-panel-app
                  key: APP_KEY
            - name: SESSION_SECURE
              valueFrom:
                secretKeyRef:
                  name: pelican-panel-app
                  key: SESSION_SECURE
            - name: OAUTH_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
                  name: pelican-panel-app
                  key: OAUTH_CLIENT_SECRET
            - name: OAUTH_CLIENT_ID
              value: pelican-panel
            - name: OAUTH_BASE_URI
              value: "https://pelican.khalisio.com"
            - name: OAUTH_AUTH_SERVER_URI
              value: "https://auth.khalisio.com"
            - name: OAUTH_CLIENT_PORTAL_URI
              value: "https://auth.khalisio.com"
            - name: OAUTH_CLIENT_ADMIN_URI
              value: "https://auth.khalisio.com"
            - name: CACHE_DRIVER
              value: file
            - name: SESSION_DRIVER
              value: file
          volumeMounts:
            - name: data
              mountPath: /var/www/html/storage/app
            - name: logs
              mountPath: /var/www/html/storage/logs
            - name: uploads
              mountPath: /var/www/html/public/uploads
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: pelican-data
        - name: logs
          persistentVolumeClaim:
            claimName: pelican-logs
        - name: uploads
          persistentVolumeClaim:
            claimName: pelican-data