{ ... }:
{
  storage-combo.content = [
    {
      apiVersion = "apps/v1";
      kind = "Deployment";
      metadata = {
        name = "storage-combo";
        labels.app = "storage-combo";
      };
      spec = {
        selector.matchLabels.app = "storage-combo";
        template = {
          metadata = {
            labels.app = "storage-combo";
          };
          spec = {
            hostUsers = false;
            containers = [
              {
                name = "storage-combo";
                image = "docker.io/library/rsshfs-server:latest";
                imagePullPolicy = "Never";
                ports = [
                  {
                    name = "ssh-port";
                    containerPort = 2222; 
                  }
                ];
                volumeMounts = [
                  {
                    name = "fuse-device";
                    mountPath = "/dev/fuse";
                  }
                ];
                securityContext = {
                  allowPrivilegeEscalation = true;
                  capabilities.add = ["SYS_ADMIN"];
                  seccompProfile.type = "RuntimeDefault";
                  runAsNonRoot = true;
                  runAsUser = 1000;
                  runAsGroup = 1000;
                };
              }
            ];
            volumes = [
              {
                name = "fuse-device";
                hostPath = {
                  path = "/dev/fuse";
                  type = "CharDevice";
                };
              }
            ];
          };
        };
      };
    }
    {
      apiVersion = "v1";
      kind = "Service";
      metadata.name = "rsshfs-server";
      spec = {
        selector.app = "storage-combo";
        ports = [
          {
            name = "ssh-port";
            protocol = "TCP";
            port = 22;
            targetPort = 2222;
          }
        ];
      };
    }
  ];
}