{ ... }: { storage-combo.content = [ { apiVersion = "apps/v1"; kind = "Deployment"; metadata = { name = "storage-combo"; labels.app = "storage-combo"; }; spec = { selector.matchLabels.app = "storage-combo"; template = { metadata = { labels.app = "storage-combo"; }; spec = { securityContext = { runAsUser = 1000; runAsGroup = 1000; capabilities.add = ["SYS_ADMIN"]; }; containers = [ { name = "storage-combo"; image = "docker.io/library/rsshfs-server:latest"; imagePullPolicy = "Never"; ports = [ { name = "ssh-port"; containerPort = 2222; } ]; volumeMounts = [ { name = "fuse-device"; mountPath = "/dev/fuse"; } ]; } ]; volumes = [ { name = "fuse-device"; hostpath = { path = "/dev/fuse"; type = "CharDevice"; }; } ]; }; }; }; } { apiVersion = "v1"; kind = "Service"; metadata.name = "rsshfs-server"; spec = { selector.app = "storage-combo"; ports = [ { name = "ssh-port"; portocol = "TCP"; port = 22; targetport = 2222; } ]; }; } ]; }