apiVersion: apps/v1
kind: Deployment
metadata:
  name: frpc
  namespace: vpn
  labels:
    app: frpc
spec:
  replicas: 1
  selector:
    matchLabels:
      app: frpc
  template:
    metadata:
      labels:
        app: frpc
    spec:
      hostNetwork: true
      containers:
      - name: ipsec
        securityContext:
          privileged: true
        image: hwdsl2/ipsec-vpn-server:latest
        imagePullPolicy: Always
        volumeMounts:
        - mountPath: /opt/src/env/vpn.env
          name: ipsec-config
          readOnly: true
        - mountPath: /lib/modules
          name: ipsec-data
          readOnly: true
      - name: frpc
        image: registry.cn-hangzhou.aliyuncs.com/offends/frp:frpc
        imagePullPolicy: Always
        volumeMounts:
        - name: frpc-config
          mountPath: /frp/frpc.ini
      volumes:
      - name: ipsec-config
        hostPath:
          path: /opt/vpn/vpn.env
      - name: frpc-config
        hostPath:
          path: /opt/vpn/frpc.ini
      - name: ipsec-data
        hostPath:
          path: /lib/modules