apiVersion: apps/v1
kind: Deployment
metadata:
  name: anubis
spec:
  replicas: 2
  selector:
    matchLabels:
      app: anubis
  template:
    metadata:
      labels:
        app: anubis
    spec:
      containers:
      - name: anubis
        image: git.distrust.co/ryan/anubis@sha256:2660a2e873ae555380463faa3430495062c009fc6d1e641d3dbc273335235dd9
        imagePullPolicy: Always
        command: ["/usr/bin/anubis"]
        env:
        - name: "BIND"
          value: ":8080"
        - name: "DIFFICULTY"
          value: "5"
        - name: "SERVE_ROBOTS_TXT"
          value: "true"
        - name: "OG_PASSTHROUGH"
          value: "true"
        - name: "COOKIE_DOMAIN"
          value: "distrust.co"
        - name: "TARGET"
          value: "http://website"
        envFrom:
        - secretRef:
            name: anubis-key
        ports:
        - containerPort: 8080
        securityContext:
          runAsUser: 1000
          runAsGroup: 1000
          runAsNonRoot: true
          allowPrivilegeEscalation: false
          capabilities:
            drop:
              - ALL
          seccompProfile:
            type: RuntimeDefault
---
apiVersion: v1
kind: Service
metadata:
  name: anubis
spec:
  ports:
  - name: http
    port: 80
    targetPort: 8080
  selector:
    app: anubis