bittorrent deployment

apiVersion: apps/v1
kind: Deployment
metadata:
  name: bittorrent
  annotations:
    security.alpha.kubernetes.io/unsafe-sysctls: net.ipv4.conf.all.src_valid_mark=1
    security.alpha.kubernetes.io/unsafe-sysctls: net.ipv6.conf.all.disable_ipv6=0
    security.alpha.kubernetes.io/unsafe-sysctls: net.ipv6.conf.all.forwarding=1
spec:
  replicas: 1
  selector:
    matchLabels:
      app: bittorrent
  template:
    metadata:
      labels:
        app: bittorrent
    spec:
      nodeSelector:
        kubernetes.io/hostname: obsidiana
      containers:
      - name: airvpn
        image: linuxserver/wireguard:latest
        livenessProbe:
          exec:
            command:
              - /bin/sh
              - -c
              - "wg show | grep -q transfer"
          initialDelaySeconds: 90
          periodSeconds: 90
        securityContext:
          privileged: true
          capabilities:
            add: ["NET_ADMIN"]
        env:
        - name: PUID
          value: "1000"
        - name: PGID
          value: "1000"
        - name: TZ
          value: America/Los_Angeles
        volumeMounts:
        - name: airvpn-config
          mountPath: /etc/wireguard/
        - name: lib-modules
          mountPath: /lib/modules
        ports:
        - containerPort: 9091
          protocol: TCP
      - name: transmission
        image: linuxserver/transmission:latest
        livenessProbe:
          httpGet:
            path: /rpc
            port: 9091
            httpHeaders:
              - name: Authorization
                value: Basic <redacted>
        env:
        - name: PUID
          value: "1000"
        - name: PGID
          value: "1000"
        - name: TZ
          value: America/Los_Angeles
        - name: USER
          valueFrom:
            secretKeyRef:
              name: transmission-secrets
              key: USER
        - name: PASS
          valueFrom:
            secretKeyRef:
              name: transmission-secrets
              key: PASS
        volumeMounts:
        - name: transmission-config
          mountPath: /config
        - name: downloads
          mountPath: /downloads
      volumes:
      - name: transmission-config
        hostPath:
          path: /srv/bittorrent/transmission/config
      - name: airvpn-config
        hostPath:
          path: /srv/bittorrent/airvpn
      - name: lib-modules
        hostPath:
          path: /lib/modules
      - name: downloads
        hostPath:
          path: /downloads