apiVersion: apps/v1
kind: Deployment
metadata:
  name: syncthing
spec:
  template:
    spec:
      containers:
        - name: syncthing
          volumeMounts:
            - name: sync-keys
              mountPath: /var/syncthing/config/cert.pem
              subPath: cert.pem
              readOnly: true
            - name: sync-keys
              mountPath: /var/syncthing/config/key.pem
              readOnly: true
              subPath: key.pem
      volumes:
        - name: sync-data
          persistentVolumeClaim: null
          nfs:
            server: 192.168.1.215
            path: /export/sync
        - name: sync-keys
          secret:
            secretName: sync-secret
            items:
              - key: cert.pem
                path: cert.pem
              - key: key.pem
                path: key.pem