---
apiVersion: v1
kind: Pod
metadata:
  annotations:
    bind-mount-options:/data/nbit-website/document_root: z
    io.kubernetes.cri-o.TTY/nbit_websites: "false"
    io.podman.annotations.autoremove/nbit_websites: "FALSE"
    io.podman.annotations.init/nbit_websites: "FALSE"
    io.podman.annotations.label/nbit_websites: type:container_runtime_t
    io.podman.annotations.privileged/nbit_websites: "FALSE"
    io.podman.annotations.publish-all/nbit_websites: "FALSE"
  labels:
    app: nbit_websites-pod
    traefik.enable: true
    traefik.http.services.nbitwebsite.loadbalancer.server.port: 80
    traefik.http.routers.nbitwebsite.rule: "Host(`linux-freelancer.ch`,`www.linux-freelancer.ch`)"
    traefik.http.routers.nbitwebsite.entrypoints: websecure
    traefik.http.routers.nbitwebsite.tls.certresolver: myresolver
    traefik.http.routers.nbitwebsite.tls.domains[0].main: www.linux-freelancer.ch
    traefik.http.routers.nbitwebsite.tls.domains[0].sans: linux-freelancer.ch
  name: nbit_websites-pod
spec:
  containers:
  - image: docker.io/library/nginx:latest
    name: nginx
    securityContext:
      capabilities:
        drop:
        - CAP_MKNOD
        - CAP_AUDIT_WRITE
      seLinuxOptions:
        type: container_runtime_t
    volumeMounts:
    - mountPath: /usr/share/nginx/html
      name: data-nbit-website-host-0
  volumes:
  - hostPath:
      path: /data/nbit-website/document_root
      type: Directory
    name: data-nbit-website-host-0