image:
  name: traefik
  tag: 2.3.2

ports:
  rtmp:
    port: 1935
    exposedPort: 1935
    expose: true
  web:
    redirectTo: websecure

service:
  spec:
    externalTrafficPolicy: Local

volumes:
  - name: traefik-configmap
    mountPath: /etc/traefik
    type: configMap

persistence:
  enabled: true
  accessMode: ReadWriteMany
  path: /data
  existingClaim: "traefik"

env:
  - name: CF_API_EMAIL
    valueFrom: 
      secretKeyRef:
        name: traefik-cloudflare
        key: CF_API_EMAIL
  - name: CF_API_KEY
    valueFrom: 
      secretKeyRef:
        name: traefik-cloudflare
        key: CF_API_KEY

securityContext:
  capabilities:
    drop: []
  readOnlyRootFilesystem: true
  runAsGroup: 0
  runAsNonRoot: false
  runAsUser: 0

podSecurityContext:
  fsGroup: 0