apiVersion: apps/v1
kind: Deployment
metadata:
  name: web-check
spec:
  replicas: 1
  selector:
    matchLabels:
      name: web-check
  template:
    metadata:
      labels:
        nginx: backend
        name: web-check
    spec:
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: kubernetes.io/arch
                operator: In
                values:
                - amd64
      containers:
        - name: web-check
          image: lissy93/web-check:latest
          imagePullPolicy: "Always"
          env:
          - name: GOOGLE_CLOUD_API_KEY
            valueFrom:
              secretKeyRef:
                name: web-check
                key: googlecloud
          - name: REACT_APP_SHODAN_API_KEY
            valueFrom:
              secretKeyRef:
                name: web-check
                key: shodan
          - name: REACT_APP_WHO_API_KEY
            valueFrom:
              secretKeyRef:
                name: web-check
                key: whoapi
          - name: SECURITY_TRAILS_API_KEY
            valueFrom:
              secretKeyRef:
                name: web-check
                key: securitytrails
          - name: BUILT_WITH_API_KEY
            valueFrom:
              secretKeyRef:
                name: web-check
                key: builtwith
          - name: TRANCO_USERNAME
            valueFrom:
              secretKeyRef:
                name: web-check
                key: tranco-username
          - name: TRANCO_API_KEY
            valueFrom:
              secretKeyRef:
                name: web-check
                key: tranco-api-key
          ports:
            - containerPort: 3000
              name: http
          livenessProbe:
            initialDelaySeconds: 600
            timeoutSeconds: 10
            httpGet:
              port: 3000
              httpHeaders:
                - name: Host
                  value: "web-check.dodges.it"
---
apiVersion: v1
kind: Service
metadata:
  name: web-check
spec:
  type: ClusterIP
  ipFamilyPolicy: PreferDualStack
  selector:
    name: web-check
  ports:
    - protocol: TCP
      port: 3000
      targetPort: 3000
      name: http
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: web-check-ingress
  annotations:
    cert-manager.io/cluster-issuer: "letsencrypt"
    acme.cert-manager.io/http01-edit-in-place: "true"
    nginx.org/client-max-body-size: "500m"
    nginx.org/proxy-connect-timeout: "60s"
    nginx.org/proxy-read-timeout: "60s"
    # Uncomment to allow solving HTTP01 challenge
    #ingress.kubernetes.io/ssl-redirect: "false"
    #nginx.org/redirect-to-https: "false"
spec:
  tls:
  - hosts:
    - web-check.dodges.it
    secretName: web-check-le-secret
  rules:
  - host: web-check.dodges.it
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: web-check
            port:
              number: 3000
  ingressClassName: nginx