apiVersion: apps/v1
kind: Deployment
metadata:
  name: $CI_PROJECT_NAME
spec:
  selector:
    matchLabels:
      app: $CI_PROJECT_NAME
  replicas: 1
  template:
    metadata:
      labels:
        app: $CI_PROJECT_NAME
    spec:
      containers:
        - name: $CI_PROJECT_NAME
          image: "$REGISTRY/$REGISTRY_USERNAME/$CI_PROJECT_NAME"
          ports:
            - name: app-port
              containerPort: 3000
          resources:
            requests:
              memory: "64Mi"
              cpu: "250m"
            limits:
              memory: "128Mi"
              cpu: "500m"
      imagePullSecrets:
        - name: regcred

---
apiVersion: v1
kind: Service
metadata:
  name: $CI_PROJECT_NAME
spec:
  ports:
    - name: app-svc-port
      port: 80
      targetPort: app-port
  selector:
    app: $CI_PROJECT_NAME

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: $CI_PROJECT_NAME
spec:
  entryPoints:
    - websecure
  routes:
    - kind: Rule
      match: Host(`yaemiku.dev`) || Host(`www.yaemiku.dev`)
      services:
        - kind: Service
          name: $CI_PROJECT_NAME
          port: app-svc-port
  tls:
    secretName: $CI_PROJECT_NAME-tls
    certResolver: letsencrypt-prod
    domains:
      - main: yaemiku.dev
        sans:
          - www.yaemiku.dev