---
apiVersion: v1
kind: Service
metadata:
  name: privoxy
  namespace: darkdork-dev
spec:
  ports:
    - port: 8118
      targetPort: 8118
      protocol: TCP
  selector:
    app: privoxy
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: privoxy
  namespace: darkdork-dev
spec:
  replicas: 1
  selector:
    matchLabels:
      app: privoxy
  template:
    metadata:
      labels:
        app: privoxy
    spec:
      imagePullSecrets:
        - name: registry-credentials
      containers:
        - name: privoxy
          image: cr.forge.lan/darkdork-dev/privoxy
          imagePullPolicy: Always
          ports:
            - containerPort: 8118
          volumeMounts:
          - name: privoxy-config
            mountPath: /etc/privoxy/config
            subPath: config
      volumes:
      - name: privoxy-config
        configMap:
          name: privoxy-config
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: privoxy-config
  namespace: darkdork-dev
data:
  config: |
    confdir /etc/privoxy
    logdir /var/log/privoxy
    logfile privoxy.log
    listen-address  0.0.0.0:8118
    toggle  0
    enable-remote-toggle  0
    enable-remote-http-toggle  0
    enable-edit-actions 0
    enforce-blocks 0
    buffer-limit 4096
    enable-proxy-authentication-forwarding 0
    forwarded-connect-retries  0
    accept-intercepted-requests 0
    allow-cgi-request-crunching 0
    split-large-forms 0
    keep-alive-timeout 5
    tolerate-pipelining 1
    socket-timeout 300

    # debug 13313
    forward-socks5 / 10.8.0.1:1080 .
    forward-socks5t .onion tor:9050 .
    forward minio/ .