apiVersion: apps/v1
kind: Deployment
metadata:
  name: ddns
spec:
  selector:
    matchLabels:
      app: ddns
  replicas: 1
  template:
    metadata:
      labels:
        app: ddns
    spec:
      containers:
        - name: ddns
          image: favonia/cloudflare-ddns:latest
          env:
            - name: CLOUDFLARE_API_TOKEN
              valueFrom:
                secretKeyRef:
                  name: ddns-secret
                  key: api_token
            - name: DOMAINS
              value: "direct.skrd.fun"
            - name: PROXIED
              value: "false"
            - name: IPV6_PROVIDER
              value: "none"
          securityContext:
            capabilities:
              drop: ["ALL"]
              add: ["SETUID", "SETGID"]
            readOnlyRootFilesystem: true
            allowPrivilegeEscalation: false
          resources:
            limits:
              memory: '128Mi'
              cpu: '10m'