chore(vaultwarden): migrate to Hcloud object storage

vaultwarden/resources/deployment.yaml

@@ -4,6 +4,7 @@ kind: Deployment
 metadata:
   name: vaultwarden
 spec:
+  replicas: 1
   selector:
     matchLabels:
       app.kubernetes.io/name: vaultwarden
@@ -15,32 +16,32 @@ spec:
         app.kubernetes.io/part-of: vaultwarden
     spec:
       containers:
-      - name: vaultwarden
+        - name: vaultwarden
-        image: vaultwarden
+          image: vaultwarden
-        envFrom:
+          envFrom:
-          - secretRef:
+            - secretRef:
-              name: vaultwarden-api-config
+                name: vaultwarden-api-config
-        env:
+          env:
-          - name: DATABASE_URL
+            - name: DATABASE_URL
-            valueFrom:
+              valueFrom:
-              secretKeyRef:
+                secretKeyRef:
-                name: vaultwarden-db-credentials-vaultwarden
+                  name: vaultwarden-db-credentials-vaultwarden
-                key: PQ_URL
+                  key: PQ_URL
-        resources:
+          resources:
-          limits:
+            limits:
-            memory: "128Mi"
+              memory: "128Mi"
-            cpu: "500m"
+              cpu: "500m"
-        ports:
+          ports:
-        - containerPort: 8080
+            - containerPort: 8080
-        volumeMounts:
+          volumeMounts:
-          - name: data
+            - name: data
-            mountPath: /data
+              mountPath: /data
-        securityContext:
+          securityContext:
-          allowPrivilegeEscalation: false
+            allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
+            readOnlyRootFilesystem: true
-          capabilities:
+            capabilities:
-            drop:
+              drop:
-              - ALL
+                - ALL
       affinity:
         nodeAffinity:
           preferredDuringSchedulingIgnoredDuringExecution:

vaultwarden/resources/pvc.yaml

@@ -4,7 +4,7 @@ kind: PersistentVolumeClaim
 metadata:
   name: vaultwarden-data
 spec:
-  storageClassName: garage
+  storageClassName: hcloud-blob
   resources:
     requests:
       storage: 5Gi