apiVersion: apps/v1
kind: Deployment
metadata:
  name: paperless
spec:
  replicas: 1
  selector:
    matchLabels:
      app: paperless
  template:
    metadata:
      labels:
        app: paperless
    spec:
      containers:
        - name: paperless
          image: paperless
          ports:
            - containerPort: 8000
          env:
          - name: PAPERLESS_REDIS
            value: redis://redis-master:6379
          - name: PAPERLESS_TIME_ZONE
            value: Europe/Berlin
          - name: PAPERLESS_OCR_LANGUAGE
            value: deu+eng+fra
          - name: PAPERLESS_URL
            value: https://paperless.kluster.moll.re
          - name: PAPERLESS_OCR_USER_ARGS
            value: '{"invalidate_digital_signatures": true}'
          - name: PAPERLESS_SECRET_KEY
            valueFrom:
              secretKeyRef:
                name: paperless-secret-key
                key: key
          - name: PAPERLESS_DATA_DIR
            value: /data
          - name: PAPERLESS_MEDIA_ROOT
            value: /data
          - name: PAPERLESS_APPS
            value: allauth.socialaccount.providers.openid_connect
          - name: PAPERLESS_SOCIALACCOUNT_PROVIDERS
            valueFrom:
              secretKeyRef:
                name: paperless-oauth
                key: provider-config
          # - name: PAPERLESS_DISABLE_REGULAR_LOGIN
          #   value: "True"
          volumeMounts:
            - name: data
              mountPath: /data
          resources:
            requests:
              cpu: "100m"
              memory: "200Mi"
            limits:
              cpu: "2"
              memory: "4Gi"
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: paperless-data