# This Argo CD Application deploys qBittorrent with Hotio's integrated Proton
# VPN support. Its dedicated namespace is privileged only because creating the
# WireGuard interface requires the NET_ADMIN Linux capability.
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: qbittorrent
  namespace: argocd
  # Deliberately no resources finalizer: deleting this Git entry must not
  # cascade into deleting qBittorrent's persistent configuration volume.
spec:
  project: default

  source:
    repoURL: https://tea.ahmza.com/ahmza.com/k8s-starter-pack.git
    targetRevision: main
    path: apps/qbittorrent

  destination:
    server: https://kubernetes.default.svc
    namespace: qbittorrent

  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    managedNamespaceMetadata:
      labels:
        pod-security.kubernetes.io/enforce: privileged
        pod-security.kubernetes.io/audit: privileged
        pod-security.kubernetes.io/warn: privileged
    syncOptions:
      - CreateNamespace=true