securityContext:
  allowPrivilegeEscalation: false
containers:
- name: etherpad-lite
  image: spreadspace/etherpad-lite:{{ item.value.version }}
  # securityContext:
  #   runAsUser: {{ etherpad_lite_app_uid }}
  #   runAsGroup: {{ etherpad_lite_app_gid }}
  resources:
    limits:
      memory: "4Gi"
  volumeMounts:
  - name: config
    mountPath: /opt/etherpad-lite/settings.json
    subPath: settings.json
    readOnly: true
  ports:
  - containerPort: 9001
    hostPort: {{ item.value.port }}
    hostIP: 127.0.0.1
- name: database
  image: "mariadb:{{ item.value.database.version }}"
  securityContext:
    runAsUser: {{ etherpad_lite_db_uid }}
    runAsGroup: {{ etherpad_lite_db_gid }}
  resources:
    limits:
      memory: "4Gi"
  env:
  - name: MYSQL_RANDOM_ROOT_PASSWORD
    value: "true"
  - name: MYSQL_DATABASE
    value: etherpad-lite
  - name: MYSQL_USER
    value: etherpad-lite
  - name: MYSQL_PASSWORD
    value: "{{ item.value.database.password }}"
  volumeMounts:
  - name: database
    mountPath: /var/lib/mysql
volumes:
- name: config
  hostPath:
    path: "{{ etherpad_lite_base_path }}/{{ item.key }}/config/"
    type: Directory
- name: database
  hostPath:
    path: "{{ etherpad_lite_base_path }}/{{ item.key }}/{{ item.value.database.type }}"
    type: Directory