---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: invidious-companion
  namespace: media
spec:
  selector:
    matchLabels:
      app: invidious-companion
  template:
    metadata:
      labels:
        app: invidious-companion
    spec:
      containers:
      - name: inv-companion
        image: quay.io/invidious/invidious-companion@sha256:cb28f5d7cb183a3eeee2664145e319497f22fa70afaf7111eb17fb636a937e9a
        env:
        - name: SERVER_SECRET_KEY
          valueFrom:
            secretKeyRef:
              name: invidious-secrets
              key: INVIDIOUS_COMPANION_KEY
        securityContext:
          capabilities:
            drop:
            - ALL