From 5d661bf5d95cc33563757171d59293a1142b725f Mon Sep 17 00:00:00 2001
From: Peter Kurfer <peter@icb4dc0.de>
Date: Fri, 22 Nov 2024 16:03:01 +0100
Subject: [PATCH] chore(vaultwarden): migrate to Hcloud object storage

---
 vaultwarden/resources/deployment.yaml | 53 ++++++++++++++-------------
 vaultwarden/resources/pvc.yaml        |  2 +-
 2 files changed, 28 insertions(+), 27 deletions(-)

diff --git a/vaultwarden/resources/deployment.yaml b/vaultwarden/resources/deployment.yaml
index eed9856..4e1a86a 100644
--- a/vaultwarden/resources/deployment.yaml
+++ b/vaultwarden/resources/deployment.yaml
@@ -4,6 +4,7 @@ kind: Deployment
 metadata:
   name: vaultwarden
 spec:
+  replicas: 1
   selector:
     matchLabels:
       app.kubernetes.io/name: vaultwarden
@@ -15,32 +16,32 @@ spec:
         app.kubernetes.io/part-of: vaultwarden
     spec:
       containers:
-      - name: vaultwarden
-        image: vaultwarden
-        envFrom:
-          - secretRef:
-              name: vaultwarden-api-config
-        env:
-          - name: DATABASE_URL
-            valueFrom:
-              secretKeyRef:
-                name: vaultwarden-db-credentials-vaultwarden
-                key: PQ_URL
-        resources:
-          limits:
-            memory: "128Mi"
-            cpu: "500m"
-        ports:
-        - containerPort: 8080
-        volumeMounts:
-          - name: data
-            mountPath: /data
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          capabilities:
-            drop:
-              - ALL
+        - name: vaultwarden
+          image: vaultwarden
+          envFrom:
+            - secretRef:
+                name: vaultwarden-api-config
+          env:
+            - name: DATABASE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: vaultwarden-db-credentials-vaultwarden
+                  key: PQ_URL
+          resources:
+            limits:
+              memory: "128Mi"
+              cpu: "500m"
+          ports:
+            - containerPort: 8080
+          volumeMounts:
+            - name: data
+              mountPath: /data
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+                - ALL
       affinity:
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:
diff --git a/vaultwarden/resources/pvc.yaml b/vaultwarden/resources/pvc.yaml
index d09fc3b..f0e6b3f 100644
--- a/vaultwarden/resources/pvc.yaml
+++ b/vaultwarden/resources/pvc.yaml
@@ -4,7 +4,7 @@ kind: PersistentVolumeClaim
 metadata:
   name: vaultwarden-data
 spec:
-  storageClassName: garage
+  storageClassName: hcloud-blob
   resources:
     requests:
       storage: 5Gi