apiVersion: apps/v1
kind: Deployment
metadata:
  name: presentation
  namespace: astrololo
spec:
  replicas: 1
  selector: { matchLabels: { app: presentation } }
  template:
    metadata: { labels: { app: presentation } }
    spec:
      imagePullSecrets: [{ name: gitea-registry }]
      containers:
        - name: presentation
          image: gitea.czernobog.pl/gitea/astrololo-presentation:9323803c
          ports: [{ containerPort: 8000 }]
          env:
            - name: LOGIC_URL
              value: "http://logic:8001"
            # Logowanie do aplikacji (LOG-32). Bez tych sekretów aplikacja stoi
            # OTWARTA — a wystawia treść baz interpretacyjnych. Sekret tworzony
            # POZA repo (jak gitea-registry) — patrz README.md.
            - name: APP_PASSWORD
              valueFrom:
                secretKeyRef: { name: astrololo-auth, key: APP_PASSWORD }
            - name: INTERNAL_TOKEN
              valueFrom:
                secretKeyRef: { name: astrololo-auth, key: INTERNAL_TOKEN }
            - name: APP_USER
              value: "astrololo"
            - name: RATE_LIMIT_PER_MIN
              value: "120"                       # 0 = bez limitu
          resources:
            requests: { cpu: "100m", memory: "128Mi" }
            limits:   { cpu: "300m", memory: "256Mi" }
---
apiVersion: v1
kind: Service
metadata:
  name: presentation
  namespace: astrololo
spec:
  type: NodePort                                  # wejście z przeglądarki
  selector: { app: presentation }
  ports: [{ port: 8000, targetPort: 8000 }]