apiVersion: v1
kind: Namespace
metadata:
  name: bwbackup
---
apiVersion: batch/v1
kind: CronJob
metadata:
  name: bitwarden-backup
  namespace: bwbackup
spec:
  schedule: "0 0 * * *"
  jobTemplate:
    spec:
      ttlSecondsAfterFinished: 100
      template:
        spec:
          containers:
          - name:  bitwarden-backup
            image: gitea.tryton.geeraert.eu/pi-ux-ce/bitwarden_cli:1.0.1
            command:
              - /bin/sh
              - "-c"
              - "/config/export_bitwarden.sh"
            env:
            - name: BITWARDEN_USERNAME
              valueFrom:
                 secretKeyRef:
                   name: bitwarden-credentials
                   key: BITWARDEN_USERNAME
            - name: BITWARDEN_PASSWORD
              valueFrom:
                 secretKeyRef:
                   name: bitwarden-credentials
                   key: BITWARDEN_PASSWORD
            volumeMounts:
            - name: scripts
              mountPath: /config
            - name: bitwarden-vault-backup
              mountPath: /backup
          restartPolicy: Always
          volumes:
          - name: scripts
            configMap:
              name: bitwarden-export-scripts
              defaultMode: 0555
          - name: bitwarden-vault-backup
            persistentVolumeClaim:
              claimName: bitwarden-vault-backup
          restartPolicy: Never

---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: bitwarden-vault-backup
  namespace: bwbackup
  annotations:
    fileType: Backup
spec:
  storageClassName: nfs-storage-fastaccess
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 10Gi