apiVersion: apps/v1
kind: Deployment
metadata:
  name: deluge
  namespace: jellyfin
spec:
  replicas: 1
  selector:
    matchLabels:
      app: deluge
  template:
    metadata:
      labels:
        app: deluge
    spec:
      securityContext:
        runAsUser: 0
      containers:
        - name: deluge
          image: bottledpills/deluge-openvpn:v1.7
          securityContext:
            privileged: true  # Often required for TUN/TAP devices
            capabilities:
              add:
                - NET_ADMIN
          ports:
            - containerPort: 8112
              protocol: TCP
            - containerPort: 6881
              protocol: TCP
            - containerPort: 6881
              protocol: UDP
            - containerPort: 58846
              protocol: TCP
          env:
            - name: TZ
              value: Etc/UTC
            - name: DELUGE_LOGLEVEL
              value: "error"
            - name: OPENVPN_PROVIDER
              value: "nordvpn"
            - name: OPENVPN_USERNAME
              valueFrom:
                secretKeyRef:
                  name: nordvpn-credentials
                  key: username
            - name: OPENVPN_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: nordvpn-credentials
                  key: password
            - name: LOCAL_NETWORK
              value: "10.10.10.0/24,10.244.0.0/24"
          volumeMounts:
            - name: config
              mountPath: /config
            - name: downloads
              mountPath: /downloads
            - name: dev-net-tun
              mountPath: /dev/net/tun
      volumes:
        - name: config
          persistentVolumeClaim:
            claimName: deluge-config
        - name: downloads
          persistentVolumeClaim:
            claimName: deluge-downloads
        - name: dev-net-tun
          hostPath:
            path: /dev/net/tun
            type: CharDevice