apiVersion: apps/v1
kind: Deployment
metadata:
  name: sonarr
spec:
  minReadySeconds: 3
  revisionHistoryLimit: 5
  progressDeadlineSeconds: 60
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: sonarr
  template:
    metadata:
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "9797"
      labels:
        app: sonarr
    spec:
      containers:
        - image: ghcr.io/qdm12/gluetun:latest
          name: gluetun
          imagePullPolicy: Always
          securityContext:
            privileged: true
            capabilities:
              add: ["NET_ADMIN"]
          ports:
            - containerPort: 8989
          envFrom:
            - secretRef:
                name: gluetun-env
          resources:
            limits:
              cpu: 250m
              memory: 500Mi
            requests:
              cpu: 10m
              memory: 64Mi
        - name: sonarr
          image: lscr.io/linuxserver/sonarr:4.0.8
          imagePullPolicy: IfNotPresent
          env:
            - name: PUID
              value: "1000"
            - name: PGID
              value: "1000"
          livenessProbe:
            httpGet:
              path: /ping
              port: 8989
            initialDelaySeconds: 5
            timeoutSeconds: 5
          readinessProbe:
            httpGet:
              path: /ping
              port: 8989
            initialDelaySeconds: 5
            timeoutSeconds: 5
          resources:
            limits:
              cpu: 1000m
              memory: 2Gi
            requests:
              cpu: 10m
              memory: 64Mi
          volumeMounts:
            - name: config
              mountPath: /config
            - name: smb-tower-books
              mountPath: /mnt/books
              readOnly: false
      volumes:
        - name: config
          persistentVolumeClaim:
            claimName: sonarr
        - name: smb-tower-books
          nfs:
            server: 192.168.1.100
            path: /mnt/user/tv
            readOnly: true