remove separate db and sig-helper deployments

cluster/apps/invidious/invidious.yml

@@ -15,26 +15,6 @@ spec:
         app: invidious
     spec:
       initContainers:
-      - name: wait-for-companion
-        image: busybox
-        command:
-        - sh
-        - -c
-        - |
-          until nc -z -v -w30 inv-sig-helper 12999; do
-            echo "Waiting for companion to be ready..."
-            sleep 2
-          done
-      - name: wait-for-db
-        image: busybox
-        command:
-        - sh
-        - -c
-        - |
-          until nc -z -v -w30 invidious-db-service 5432; do
-            echo "Waiting for database to be ready..."
-            sleep 2
-          done
       - name: substitute-config
         image: alpine
         envFrom:
@@ -51,6 +31,50 @@ spec:
         - name: tmp
           mountPath: /mnt
           subPath: invidious.yml
+      - name: clean-db-dir
+        image: busybox
+        command:
+        - sh
+        - -c
+        - |
+          rm -rf /var/lib/postgresql/data/lost+found
+        volumeMounts:
+        - name: postgres-data
+          mountPath: /var/lib/postgresql/data
+      - name: postgres
+        image: postgres:14
+        restartPolicy: Always
+        env:
+        - name: POSTGRES_DB
+          valueFrom:
+            secretKeyRef:
+              name: invidious-db-secrets
+              key: postgres-db
+        - name: POSTGRES_USER
+          valueFrom:
+            secretKeyRef:
+              name: invidious-db-secrets
+              key: postgres-user
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: invidious-db-secrets
+              key: postgres-password
+        volumeMounts:
+        - name: postgres-data
+          mountPath: /var/lib/postgresql/data
+      - name: inv-sig-helper
+        image: quay.io/invidious/inv-sig-helper@sha256:b5466c9add729e82e4e3ee5515c30b69df02d78ebb2486dbc9c63e456f29083d
+        restartPolicy: Always
+        args: ["--tcp", "0.0.0.0:12999"]
+        env:
+        - name: RUST_LOG
+          value: "info"
+        securityContext:
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop:
+            - ALL
       containers:
       - name: invidious
         image: quay.io/invidious/invidious@sha256:9ffa4f1ea5cf01abe3102777102bd7a13153c79f6ff6ac072b6a29dda6909a8b
@@ -79,3 +103,6 @@ spec:
       - name: invidious-config
         configMap:
           name: invidious-config
+      - name: postgres-data
+        persistentVolumeClaim:
+          claimName: longhorn-invidious-config