---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: invidious-companion
  namespace: media
spec:
  selector:
    matchLabels:
      app: invidious-companion
  template:
    metadata:
      labels:
        app: invidious-companion
    spec:
      containers:
      - name: inv-companion
        image: quay.io/invidious/invidious-companion@sha256:07a1dd6893e6311e341067cf61ba5f920184e40339e4b4e195f5713f99311343
        env:
        - name: SERVER_SECRET_KEY
          valueFrom:
            secretKeyRef:
              name: invidious-secrets
              key: INVIDIOUS_COMPANION_KEY
        securityContext:
          capabilities:
            drop:
            - ALL