apiVersion: apps/v1
kind: Deployment
metadata:
  name: gohorse-backoffice-dev
  namespace: gohorsejobsdev
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gohorse-backoffice-dev
  template:
    metadata:
      labels:
        app: gohorse-backoffice-dev
        env: development
    spec:
      imagePullSecrets:
        - name: forgejo-registry  # <--- ALTERADO para o novo segredo
      # --- AJUSTE DE REDE (MTU) ---
      initContainers:
        - name: set-mtu
          image: busybox
          command: ['sh', '-c', 'ifconfig eth0 mtu $(MTU_VALUE)']
          env:
            - name: MTU_VALUE
              valueFrom:
                secretKeyRef:
                  name: backend-secrets
                  key: MTU
          securityContext:
            privileged: true
      # --- FIM DO AJUSTE ---
      containers:
        - name: backoffice
          # A imagem exata do backoffice no seu Forgejo
          image: pipe.gohorsejobs.com/bohessefm/backoffice:latest
          imagePullPolicy: Always
          ports:
            - containerPort: 3001
          env:
            - name: NODE_TLS_REJECT_UNAUTHORIZED
              value: "0"
            - name: MTU 
              valueFrom:
                secretKeyRef:
                  name: backend-secrets
                  key: MTU
          envFrom:
            - secretRef:
                name: backend-secrets
          resources:
            requests:
              memory: "800Mi"
              cpu: "300m"
            limits:
              memory: "2Gi"
              cpu: "800m"