From f8d249a8696053087c371e8e984cff9f6c3937bc Mon Sep 17 00:00:00 2001
From: Alpha Chen <alpha@kejadlen.dev>
Date: Fri, 6 May 2022 12:46:04 -0700
Subject: [PATCH] [meta] bump babybuddy to 1.10.2

---
 meta/linode/babybuddy.tf | 42 +++++++++-------------------------------
 1 file changed, 9 insertions(+), 33 deletions(-)

diff --git a/meta/linode/babybuddy.tf b/meta/linode/babybuddy.tf
index 6ad1eee..cccd398 100644
--- a/meta/linode/babybuddy.tf
+++ b/meta/linode/babybuddy.tf
@@ -13,37 +13,6 @@ resource "kubernetes_persistent_volume_claim" "babybuddy" {
   }
 }
 
-# resource "kubernetes_pod" "babybuddy" {
-#   metadata {
-#     name = "babybuddy"
-#     labels = {
-#       app = "babybuddy"
-#     }
-#   }
-
-#   spec {
-#     container {
-#       # https://github.com/babybuddy/babybuddy/issues/337
-#       image             = "lscr.io/linuxserver/babybuddy:v1.9.0-ls14"
-#       image_pull_policy = "Always"
-#       name              = "babybuddy"
-#       port {
-#         container_port = 8000
-#       }
-#       volume_mount {
-#         name       = "babybuddy"
-#         mount_path = "/config"
-#       }
-#     }
-#     volume {
-#       name = "babybuddy"
-#       persistent_volume_claim {
-#         claim_name = "babybuddy"
-#       }
-#     }
-#   }
-# }
-
 resource "kubernetes_deployment" "babybuddy" {
   metadata {
     name = "babybuddy"
@@ -66,8 +35,7 @@ resource "kubernetes_deployment" "babybuddy" {
       }
       spec {
         container {
-          # https://github.com/babybuddy/babybuddy/issues/337
-          image             = "lscr.io/linuxserver/babybuddy:v1.9.0-ls14"
+          image             = "lscr.io/linuxserver/babybuddy:1.10.2"
           name              = "babybuddy"
           image_pull_policy = "Always"
           port {
@@ -77,6 +45,14 @@ resource "kubernetes_deployment" "babybuddy" {
             name       = "babybuddy"
             mount_path = "/config"
           }
+          env {
+            name  = "CSRF_TRUSTED_ORIGINS"
+            value = "https://babybuddy.${var.domain}"
+          }
+          env {
+            name  = "SECURE_PROXY_SSL_HEADER"
+            value = "True"
+          }
         }
         volume {
           name = "babybuddy"