---
image:
  repository: lib42/deluge
  tag: "2.1.1"

podSecurityContext:
  fsGroup: 2420

securityContext:
  runAsUser: 1420
  runAsGroup: 2420

ingress:
  main:
    enabled: true
    annotations:
      cert-manager.io/cluster-issuer: "vault-issuer"
      traefik.ingress.kubernetes.io/router.tls: 'true'
      nginx.ingress.kubernetes.io/proxy-body-size: 50m
    hosts:
      - host: torrent.dc
        paths:
          - path: /
            pathType: Prefix
    tls:
      - secretName: torrent.dc-tls
        hosts:
          - torrent.dc

service:
  main:
    enabled: true
    ports:
      http:
        port: 8112

env:
  PUID: 1429
  GUID: 2420
  SSL_CERT_DIR: /etc/ssl/certs

persistence:
  config:
    enabled: true
    mountPath: /config
    size: 10M

  # use hostpath instead
  downloads:
    enabled: true
    type: hostPath
    hostPath: /data/media/torrent
    mountPath: /downloads

  tmp:
    enabled: true
    type: emptyDir
    mountPath: /tmp

  cache:
    enabled: true
    type: emptyDir
    mountPath: /home/deluge/.cache

## VPN
addons:
  vpn:
    enabled: true

    env:
      VPN_SERVICE_PROVIDER: mullvad
      VPN_TYPE: openvpn
      WIREGUARD_ADDRESSES: 10.67.135.224/32

      DNS_KEEP_NAMESERVER: "on"
      DOT: "on"
      FIREWALL: "on"
      FIREWALL_INPUT_PORTS: "8112,8000"
      FIREWALL_VPN_INPUT_PORTS: 61086

    envFrom:
    - secretRef:
        name: wireguard-config

    securityContext:
      capabilities:
        add:
          - NET_ADMIN

    livenessProbe:
      httpGet:
        path: /v1/openvpn/status
        port: 8000
      initialDelaySeconds: 30
      periodSeconds: 30

additionalContainers:
  deluge-daemon:
    env:
      - name: SSL_CERT_DIR
        value: /etc/ssl/certs

    securityContext:
      runAsUser: 1420
      runAsGroup: 2420