apiVersion: apps/v1
kind: Deployment
metadata:
  name: miniflux
  labels:
    app: miniflux
spec:
  replicas: 2
  selector:
    matchLabels:
      app: miniflux
  template:
    metadata:
      labels:
        app: miniflux
    spec:
      containers:
        - name: miniflux
          image: git.janky.solutions/finn/miniflux:disable-local-auth
          imagePullPolicy: Always
          resources: {}
          envFrom:
            - secretRef:
                name: miniflux
          env:
            - name: DATABASE_URL
              value: "postgresql://miniflux-database.miniflux.svc.cluster.local/miniflux"
            - name: PGUSER
              valueFrom:
                secretKeyRef:
                  name: miniflux.miniflux-database.credentials.postgresql.acid.zalan.do
                  key: username
            - name: PGPASSWORD
              valueFrom:
                secretKeyRef:
                  name: miniflux.miniflux-database.credentials.postgresql.acid.zalan.do
                  key: password
            - name: RUN_MIGRATIONS
              value: "1"
            - name: BASE_URL
              value: https://miniflux.janky.solutions
            - name: HTTPS
              value: "1"
            - name: MEDIA_PROXY_MODE
              value: all
            - name: METRICS_COLLECTOR
              value: "1"
            - name: METRICS_ALLOWED_NETWORKS
              value: 10.42.0.0/16
            - name: OAUTH2_PROVIDER
              value: oidc
            - name: OAUTH2_OIDC_DISCOVERY_ENDPOINT
              value: https://auth-next.janky.solutions/realms/janky.solutions
            - name: OAUTH2_REDIRECT_URL
              value: https://miniflux.janky.solutions/oauth2/oidc/callback
            - name: OAUTH2_CLIENT_ID
              value: miniflux
            - name: OAUTH2_USER_CREATION
              value: "1"
            - name: DISABLE_LOCAL_AUTH
              value: "1"
          ports:
            - name: web
              containerPort: 8080