apiVersion: v1
kind: Pod
metadata:
  name: borg-backup-sidekick
  namespace: git-limbosolutions-com
  labels:
    app: borg-backup-sidekick
spec:
  containers:
      - name: borg-backup-sidekick
        image: git.limbosolutions.com/kb/borg-backup:latest
        imagePullPolicy: Always
        resources:
          limits:
            memory: "512Mi"
            cpu: "500m"
          requests:
            memory: "256Mi"
            cpu: "250m"
        env:
          - name: BORG_REPO
            valueFrom:
              secretKeyRef:
                name: gitea-backup-secret
                key: borg_repo

          - name: BORG_PASSPHRASE
            valueFrom:
              secretKeyRef:
                name: gitea-backup-secret
                key: borg_passphrase

          - name: BORG_RSH
            value: ssh -p 2222 -o StrictHostKeyChecking=no -o LogLevel=ERROR

          - name: borg_key_file
            value: /root/.borg/key

        command: ["sh", "-c"]
        args:
        - |
          while true; do
             sleep 1s
          done

        volumeMounts:
        
        - name: gitea-backup-secrets
          mountPath: /root/.ssh/id_rsa
          subPath: ssh_id_rsa
          readOnly: true

        - name: gitea-backup-secrets
          mountPath: /app/borg/key
          subPath: borg_key
  volumes:
    - name: gitea-backup-secrets
      secret:
        secretName: gitea-backup
        defaultMode: 0600