securityContext:
  allowPrivilegeEscalation: false
  runAsUser: {{ mumble_uid }}
  runAsGroup: {{ mumble_gid }}
hostNetwork: true
containers:
- name: mumble
  image: "mumblevoip/mumble-server:{{ mumble_version }}"
  env:
  - name: TZ
    value: "{{ mumble_timezone }}"
  - name: MUMBLE_SUPERUSER_PASSWORD
    value: "{{ mumble_superuser_password }}"
  - name: MUMBLE_CONFIG_SSLCERT
    value: "/etc/mumble/ssl/cert.pem"
  - name: MUMBLE_CONFIG_SSLKEY
    value: "/etc/mumble/ssl/privkey.pem"
  - name: MUMBLE_CONFIG_SSLDHPARAMS
    value: "/etc/mumble/ssl/dhparams.pem"
{% for opt, value in mumble_config_options.items() %}
  - name: MUMBLE_CONFIG_{{ opt | upper }}
    value: "{{ value }}"
{% endfor %}
  resources:
    limits:
      memory: "512Mi"
  volumeMounts:
  - name: ssl
    mountPath: /etc/mumble/ssl
    readOnly: true
  - name: data
    mountPath: /data
volumes:
- name: ssl
  hostPath:
    path: "{{ mumble_base_path }}/{{ mumble_instance }}/ssl"
    type: Directory
- name: data
  hostPath:
    path: "{{ mumble_base_path }}/{{ mumble_instance }}/data"
    type: Directory