apiVersion: apps/v1
kind: Deployment
metadata:
  name: aprs
  namespace: aprs
spec:
  replicas: 2
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  minReadySeconds: 30
  progressDeadlineSeconds: 600
  selector:
    matchLabels:
      app: aprs
  template:
    metadata:
      labels:
        app: aprs
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "4000"
        prometheus.io/path: "/metrics"
    spec:
      priorityClassName: system-cluster-critical
      terminationGracePeriodSeconds: 90
      imagePullSecrets:
        - name: forgejo-registry
      securityContext:
        runAsNonRoot: true
        runAsUser: 1001
        fsGroup: 1001
        seccompProfile:
          type: RuntimeDefault
      initContainers:
        - name: migrate
          image: git.mcintire.me/graham/aprs.me:main-1777477809-208401e
          imagePullPolicy: IfNotPresent
          command: ["/app/bin/migrate"]
          securityContext:
            allowPrivilegeEscalation: false
            runAsNonRoot: true
            runAsUser: 1001
            capabilities:
              drop:
                - ALL
            seccompProfile:
              type: RuntimeDefault
          env:
            - name: MIX_ENV
              value: "prod"
            - name: SKIP_DB_CREATE
              value: "true"
            - name: PHX_HOST
              value: "aprs.me"
            - name: PORT
              value: "4000"
            - name: APRS_PORT
              value: "10152"
            - name: APRS_HOST
              value: "204.110.191.232"
            - name: APRS_CALLSIGN
              value: "w5isp-1"
            - name: APRS_PASSWORD
              value: "15748"
            - name: RELEASE_COOKIE
              valueFrom:
                secretKeyRef:
                  name: aprs-secrets
                  key: RELEASE_COOKIE
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: aprs-secrets
                  key: SECRET_KEY_BASE
          envFrom:
            - secretRef:
                name: aprs-db
          resources:
            requests:
              memory: "256Mi"
              cpu: "100m"
            limits:
              memory: "512Mi"
              cpu: "500m"
      containers:
        - name: aprs
          image: git.mcintire.me/graham/aprs.me:main-1777477809-208401e
          imagePullPolicy: IfNotPresent
          securityContext:
            allowPrivilegeEscalation: false
            runAsNonRoot: true
            runAsUser: 1001
            capabilities:
              drop:
                - ALL
            seccompProfile:
              type: RuntimeDefault
          ports:
            - containerPort: 4000
              name: http
            - containerPort: 4369
              name: epmd
            - containerPort: 9000
              name: dist
          lifecycle:
            preStop:
              exec:
                command:
                  - /bin/sh
                  - -c
                  - sleep 20
          env:
            - name: CLUSTER_ENABLED
              value: "true"
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: POD_IP
              valueFrom:
                fieldRef:
                  fieldPath: status.podIP
            - name: PORT
              value: "4000"
            - name: PHX_HOST
              value: "aprs.me"
            - name: MIX_ENV
              value: "prod"
            - name: POOL_SIZE
              value: "25"
            - name: PACKET_RETENTION_DAYS
              value: "1"
            - name: APRS_CALLSIGN
              value: "w5isp-1"
            - name: APRS_PORT
              value: "10152"
            - name: APRS_HOST
              value: "204.110.191.232"
            - name: APRS_PASSWORD
              value: "15748"
            - name: RELEASE_COOKIE
              valueFrom:
                secretKeyRef:
                  name: aprs-secrets
                  key: RELEASE_COOKIE
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
                  name: aprs-secrets
                  key: SECRET_KEY_BASE
            - name: RESEND_API_KEY
              valueFrom:
                secretKeyRef:
                  name: aprs-secrets
                  key: RESEND_API_KEY
          envFrom:
            - secretRef:
                name: aprs-db
          resources:
            requests:
              memory: "512Mi"
              cpu: "500m"
            limits:
              memory: "1Gi"
              cpu: "2000m"
          startupProbe:
            httpGet:
              path: /health
              port: 4000
            initialDelaySeconds: 10
            periodSeconds: 5
            timeoutSeconds: 3
            failureThreshold: 12
          livenessProbe:
            httpGet:
              path: /health
              port: 4000
            periodSeconds: 10
            timeoutSeconds: 3
            failureThreshold: 3
          readinessProbe:
            httpGet:
              path: /health
              port: 4000
            initialDelaySeconds: 5
            periodSeconds: 5
            timeoutSeconds: 2
            successThreshold: 1
            failureThreshold: 3