apiversion: v1
kind: Pod
metadata:
  name: luc-pod
  annotations:
    io.podman.annotations.infra.name: luc-pod-infra
spec:
  containers:
#  - name: root
#   image: 
#   env:
#   - name: PORT
#     value: 3000
#    ports:
#    - containerport: 3000
#      hostport: 
#      protocol: TCP
#   volumemounts:
#   - name: localtime
#     mountpath: /etc/localtime
#     readonly: true

  - name: git
    image: codeberg.org/forgejo/forgejo:9
    env:
    - name: USER_UID
      value: "1000"
    - name: USER_GID
      value: "1000"
    - name: FORGEJO__database__DB_TYPE
      value: "postgres"
    - name: FORGEJO__database__HOST
      value: "luc-pod-postgres"
    - name: FORGEJO__database__USER
      value: "postgres"
    - name: FORGEJO__database__PASSWD
      valuefrom:
        secretkeyref:
          name: luc-secrets
          key: postgres-password
    - name: FORGEJO__database__NAME
      value: "forgejo"
    ports: 
    - containerport: 3100
      hostport: 
      protocol: TCP
    volumemounts:
    - name: git-data
      mountpath: /data
    - name: localtime
      mountpath: /etc/localtime
      readonly: true

  - name: tailscale
    image: ghcr.io/tailscale/tailscale:latest
    env:
    - name: TS_HOSTNAME
      value: "luc-pod"
    - name: TS_AUTHKEY
      value: ""
    - name: TS_STATE_DIR
      value: "/var/lib/tailscale"
    - name: TS_EXTRA_ARGS
      value: "--login-server="
    volumemounts:
    - name: tailscale-lib
      mountpath: /var/lib/tailscale
    - name: localtime
      mountpath: /etc/localtime
      readonly: true

#  - name: wiki
#    image: git.ampel.dev/git-mkdocs:latest
#    env: 
#    - name: GIT_REPO_URL
#      value: ""
#    - name: PORT
#      value: 3200
#    ports:
#    - containerport: 3200
#      hostport: 
#      protocol: TCP
#    volumemounts:
#    - name: localtime
#      mountpath: /etc/localtime
#      readonly: true

#  - name: blog
#    ports:
#    - containerport: 3300
#      hostport: 
#      protocol: TCP

#  - name: notes
#    ports:
#    - containerport: 3400
#      hostport: 
#      protocol: TCP

  - name: postgres
    image: docker.io/library/postgres:16-alpine
    env:
    - name: POSTGRES_PASSWORD
      valuefrom:
        secretkeyref:
          name: luc-secrets
          key: postgres-password
    volumemounts:
    - name: postgres-dump
      mountpath: /dump
    - name: postgres-data
      mountpath: /var/lib/postgresql/data
    - name: localtime
      mountpath: /etc/localtime
      readonly: true

  volumes:
  - name: git-data
    persistentvolumeclaim: 
      claimname: luc-pod-git-data
  - name: tailscale-lib
    persistentvolumeclaim:
      claimname: luc-pod-tailscale-lib
  - name: postgres-dump
    hostpath:
      path: $HOME/.dump/luc
      type: Directory
  - name: postgres-data
    persistentvolumeclaim:
      claimname: luc-pod-postgres-data
  - name: localtime
    hostpath:
      path: /etc/localtime
      type: File