---
image:
  repository: reg.dc/deluge
  tag: 2.1.1

command: [ "/usr/bin/deluge-web" ]
args: [ "-d", "-c", "/config", "-L", "info" ]

securityContext:
  runAsNonRoot: true
  privileged: false
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
  capabilities:
    drop:
    - ALL

ingress:
  main:
    enabled: true
    annotations:
      cert-manager.io/cluster-issuer: "vault-issuer"
      traefik.ingress.kubernetes.io/router.tls: 'true'
      nginx.ingress.kubernetes.io/proxy-body-size: 50m
    hosts:
      - host: torrent.dc
        paths:
          - path: /
            pathType: Prefix
    tls:
      - secretName: torrent.dc-tls
        hosts:
          - torrent.dc

service:
  main:
    enabled: true
    ports:
      http:
        port: 8112

env:
  PUID: 1000
  GUID: 1000

probes:
  liveness:
    enabled: false
  readiness:
    enabled: false
  startup:
    enabled: false

persistence:
  config:
    enabled: true
    mountPath: /config
    size: 10M

  # use hostpath instead
  downloads:
    enabled: true
    type: hostPath
    hostPath: /data/torrent
    mountPath: /downloads

  startupProbe:
    initialDelaySeconds: 600
    periodSeconds: 120
    failureThreshold: 6

## VPN
addons:
  vpn:
    enabled: true

    env:
      VPN_SERVICE_PROVIDER: mullvad
      VPN_TYPE: openvpn
      WIREGUARD_ADDRESSES: 10.67.135.224/32

      DNS_KEEP_NAMESERVER: "on"
      DOT: "on"
      FIREWALL: "on"
      FIREWALL_INPUT_PORTS: "8112,8000"
      FIREWALL_VPN_INPUT_PORTS: 61086

    envFrom:
    - secretRef:
        name: wireguard-config

    securityContext:
      capabilities:
        add:
          - NET_ADMIN

    livenessProbe:
      httpGet:
        path: /v1/openvpn/status
        port: 8000
      initialDelaySeconds: 30
      periodSeconds: 30

additionalContainers:
  deluge-daemon:
    image: reg.dc/deluge:2.1.1
    volumeMounts:
    - name: config
      mountPath: /config
    - name: downloads
      mountPath: /downloads