---
apiVersion: {{ include "common.capabilities.deployment.apiVersion" . }}
kind: {{ .Values.front.kind }}
metadata:
  name: {{ printf "%s-front" (include "mailu.fullname" .) }}
  namespace: {{ include "common.names.namespace" . | quote }}
  labels: {{- include "common.labels.standard" . | nindent 4 }}
    app.kubernetes.io/component: front
    {{- if .Values.commonLabels }}
    {{- include "common.tplvalues.render" ( dict "value" .Values.commonLabels "context" $ ) | nindent 4 }}
    {{- end }}
  {{- if .Values.commonAnnotations }}
  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
  {{- end }}
spec:
  {{- if eq .Values.front.kind "Deployment" }}
  replicas: {{ .Values.front.replicaCount }}
  {{- end }}
  {{- if and .Values.front.updateStrategy (eq .Values.front.kind "Deployment") }}
  strategy: {{- toYaml .Values.front.updateStrategy | nindent 4 }}
  {{- end }}
  {{- if and .Values.front.updateStrategy (eq .Values.front.kind "DaemonSet") }}
  updateStrategy: {{- toYaml .Values.front.updateStrategy | nindent 4 }}
  {{- end }}
  revisionHistoryLimit: {{ .Values.front.revisionHistoryLimit }}
  selector:
    matchLabels: {{- include "common.labels.matchLabels" . | nindent 6 }}
      app.kubernetes.io/component: front
  template:
    metadata:
      labels: {{- include "common.labels.standard" . | nindent 8 }}
        app.kubernetes.io/component: front
        {{- if .Values.front.podLabels }}
        {{- include "common.tplvalues.render" (dict "value" .Values.front.podLabels "context" $) | nindent 8 }}
        {{- end }}
      {{- if .Values.front.podAnnotations }}
      annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.front.podAnnotations "context" $) | nindent 8 }}
      {{- end }}
    spec:
      {{- include "common.images.pullSecrets" (dict "images" (list .Values.front.image) "global" .Values.global) | nindent 6 }}
      {{- if .Values.front.hostAliases }}
      hostAliases: {{- include "common.tplvalues.render" (dict "value" .Values.front.hostAliases "context" $) | nindent 8 }}
      {{- end }}
      {{- if .Values.front.nodeSelector }}
      nodeSelector: {{- include "common.tplvalues.render" (dict "value" .Values.front.nodeSelector "context" $) | nindent 8 }}
      {{- end }}
      {{- if .Values.front.affinity }}
      affinity: {{- include "common.tplvalues.render" (dict "value" .Values.front.affinity "context" $) | nindent 8 }}
      {{- end }}
      {{- if .Values.front.tolerations }}
      tolerations: {{- include "common.tplvalues.render" (dict "value" .Values.front.tolerations "context" $) | nindent 8 }}
      {{- end }}
      {{- if .Values.front.priorityClassName }}
      priorityClassName: {{ .Values.front.priorityClassName | quote }}
      {{- end }}
      {{- if .Values.front.schedulerName }}
      schedulerName: {{ .Values.front.schedulerName | quote }}
      {{- end }}
      {{- if .Values.front.topologySpreadConstraints }}
      topologySpreadConstraints: {{- include "common.tplvalues.render" (dict "value" .Values.front.topologySpreadConstraints "context" $) | nindent 8 }}
      {{- end }}
      {{- if .Values.front.terminationGracePeriodSeconds }}
      terminationGracePeriodSeconds: {{ .Values.front.terminationGracePeriodSeconds }}
      {{- end }}
      {{- if .Values.front.initContainers }}
      initContainers: {{- include "common.tplvalues.render" (dict "value" .Values.front.initContainers "context" $) | nindent 8 }}
      {{- end }}
      {{- if .Values.front.podSecurityContext.enabled }}
      securityContext: {{- omit .Values.front.podSecurityContext "enabled" | toYaml | nindent 8 }}
      {{- end }}
      containers:
        - name: front
          image: {{ .Values.imageRegistry }}/{{ .Values.front.image.repository }}:{{ default (include "mailu.version" .) .Values.front.image.tag }}
          imagePullPolicy: {{ .Values.front.image.pullPolicy }}
          {{- if .Values.front.containerSecurityContext.enabled }}
          securityContext: {{- omit .Values.front.containerSecurityContext "enabled" | toYaml | nindent 12 }}
          {{- end }}
          volumeMounts:
            - name: certs
              mountPath: /certs
            {{- if .Values.front.extraVolumeMounts }}
            {{- include "common.tplvalues.render" (dict "value" .Values.front.extraVolumeMounts "context" $) | nindent 12 }}
            {{- end }}
          env:
            - name: LOG_LEVEL
              value: {{ default .Values.logLevel .Values.front.logLevel }}
            {{- tpl (include "mailu.envvars.secrets" .) $ | nindent 12 }}
            {{- if .Values.front.extraEnvVars }}
            {{- include "common.tplvalues.render" (dict "value" .Values.front.extraEnvVars "context" $) | nindent 12 }}
            {{- end }}
          envFrom:
            - configMapRef:
                name: {{ printf "%s-envvars" (include "mailu.fullname" .) }}
            {{- if .Values.front.extraEnvVarsCM }}
            - configMapRef:
                name: {{ include "common.tplvalues.render" (dict "value" .Values.front.extraEnvVarsCM "context" $) }}
            {{- end }}
            {{- if .Values.front.extraEnvVarsSecret }}
            - secretRef:
                name: {{ include "common.tplvalues.render" (dict "value" .Values.front.extraEnvVarsSecret "context" $) }}
            {{- end }}
          ports:
            - name: pop3
              protocol: TCP
              containerPort: 110
              {{- if .Values.front.hostPort.enabled }}
              hostPort: 110
              {{- end}}
            - name: pop3s
              protocol: TCP
              containerPort: 995
              {{- if .Values.front.hostPort.enabled }}
              hostPort: 995
              {{- end}}
            - name: imap
              protocol: TCP
              containerPort: 143
              {{- if .Values.front.hostPort.enabled }}
              hostPort: 143
              {{- end}}
            - name: imaps
              protocol: TCP
              containerPort: 993
              {{- if .Values.front.hostPort.enabled }}
              hostPort: 993
              {{- end}}
            - name: smtp
              protocol: TCP
              containerPort: 25
              {{- if .Values.front.hostPort.enabled }}
              hostPort: 25
              {{- end}}
            - name: smtps
              protocol: TCP
              containerPort: 465
              {{- if .Values.front.hostPort.enabled }}
              hostPort: 465
              {{- end}}
            - name: smtp-auth
              protocol: TCP
              containerPort: 10025
            - name: imap-auth
              protocol: TCP
              containerPort: 10143
            - name: smtpd
              protocol: TCP
              containerPort: 587
              {{- if .Values.front.hostPort.enabled }}
              hostPort: 587
              {{- end}}
            - name: auth
              containerPort: 8000
              protocol: TCP
            - name: http
              containerPort: 80
              protocol: TCP
            - name: sieve
              containerPort: 14190
              protocol: TCP
            {{ if not .Values.ingress.enabled }}
            - name: https
              containerPort: 443
              protocol: TCP
            {{end}}
          {{- if .Values.front.resources }}
          resources: {{- toYaml .Values.front.resources | nindent 12 }}
          {{- end }}
          {{- if .Values.front.startupProbe.enabled }}
          startupProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.front.startupProbe "enabled") "context" $) | nindent 12 }}
            exec:
              command:
                - sh
                - -c
                - 'curl -skfLo /dev/null http://127.0.0.1:10204/health && kill -0 `cat /run/dovecot/master.pid`'
          {{- end }}
          {{- if .Values.front.livenessProbe.enabled }}
          livenessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.front.livenessProbe "enabled") "context" $) | nindent 12 }}
            exec:
              command:
                - sh
                - -c
                - 'curl -skfLo /dev/null http://127.0.0.1:10204/health && kill -0 `cat /run/dovecot/master.pid`'
          {{- end }}
          {{- if .Values.front.readinessProbe.enabled }}
          readinessProbe: {{- include "common.tplvalues.render" (dict "value" (omit .Values.front.readinessProbe "enabled") "context" $) | nindent 12 }}
            exec:
              command:
                - sh
                - -c
                - 'curl -skfLo /dev/null http://127.0.0.1:10204/health && kill -0 `cat /run/dovecot/master.pid`'
          {{- end }}
      {{- if .Values.front.extraContainers }}
        {{- toYaml .Values.front.extraContainers | nindent 8 }}
      {{- end }}
      volumes:
        - name: certs
          secret:
            items:
              - key: tls.crt
                path: cert.pem
              - key: tls.key
                path: key.pem
            secretName: {{ include "mailu.certificatesSecretName" . }}
        {{- if .Values.front.extraVolumes }}
        {{- include "common.tplvalues.render" (dict "value" .Values.front.extraVolumes "context" $) | nindent 8 }}
        {{- end }}