1 files changed, 81 insertions, 0 deletions
diff --git a/f3s/xplayer/helm-chart/templates/deployment.yaml b/f3s/xplayer/helm-chart/templates/deployment.yaml
new file mode 100644
index 0000000..fb7dd28
--- /dev/null
+++ b/f3s/xplayer/helm-chart/templates/deployment.yaml
@@ -0,0 +1,81 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: xplayer
+  namespace: services
+spec:
+  replicas: 1
+  # Recreate so the old pod fully terminates before the new one starts —
+  # avoids NFS-lock races on the hostPath-backed PVC during rolling updates.
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: xplayer
+  template:
+    metadata:
+      labels:
+        app: xplayer
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65534
+        runAsGroup: 65534
+        fsGroup: 65534
+      containers:
+        - name: xplayer
+          image: registry.lan.buetow.org:30001/player:df224ef
+          imagePullPolicy: IfNotPresent
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 65534
+            runAsGroup: 65534
+          ports:
+            - containerPort: 8080
+              name: http
+          env:
+            - name: PORT
+              value: "8080"
+            - name: DB_PATH
+              value: "/data/media.db"
+            - name: MEDIA_ROOT
+              value: "/media"
+            - name: SECURE_COOKIES
+              value: "true"
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 10
+          readinessProbe:
+            httpGet:
+              path: /readyz
+              port: http
+            initialDelaySeconds: 3
+            periodSeconds: 5
+          resources:
+            requests:
+              memory: 128Mi
+              cpu: 100m
+            limits:
+              memory: 512Mi
+              cpu: "1"
+          volumeMounts:
+            - name: xplayer-data
+              mountPath: /data
+            - name: xplayer-media
+              mountPath: /media
+            - name: tmp
+              mountPath: /tmp
+      volumes:
+        - name: xplayer-data
+          persistentVolumeClaim:
+            claimName: xplayer-data-pvc
+        - name: xplayer-media
+          persistentVolumeClaim:
+            claimName: xplayer-media-pvc
+        - name: tmp
+          emptyDir: {}