Improve security, add emptydir mounts

values.yaml

@@ -5,6 +5,13 @@ image:
   tag: "latest"                                                    # Image tag; if empty, defaults to Chart appVersion
 imagePullSecrets: []                                               # Optional secrets for private registries
 
+# Optional overrides for chart naming
+nameOverride: ""
+fullnameOverride: ""
+
+# Node selection and scheduling, deploys to all nodes by default
+nodeSelector: {}
+
 # Resource requests and limits for the miner container
 resources:
   limits:
@@ -19,7 +26,6 @@ priorityClassName: "duino-miner-lowest"
 
 # Environment variables for the Duino-Coin miner
 env:
-  DUCO_DIR: "/duino-coin/Duino-Coin PC Miner 4.3" # Directory where the miner config lives
   DUCO_USERNAME: "your_actual_username"           # Your Duino-Coin wallet or username
   DUCO_MINING_KEY: "your_actual_mining_key"       # Mining key
   DUCO_INTENSITY: "95"                            # Mining intensity (0–100)
@@ -34,9 +40,8 @@ env:
   DUCO_RASPI_CPU_IOT: "n"                         # Raspberry Pi CPU I/O tuning
   DUCO_DISCORD_RP: "n"                            # Discord Rich Presence
 
-# Optional overrides for chart naming
-nameOverride: ""
-fullnameOverride: ""
+# Directory where miner config is located is mounted as an EmptyDir
+ducoDir: "/duino-coin/Duino-Coin PC Miner 4.3"  
 
 # Service account settings
 serviceAccount:
@@ -72,11 +77,4 @@ readinessProbe:
       # Same check as liveness: ensures a Python process is running before marking the pod ready
       - "pidof python > /dev/null"
   initialDelaySeconds: 10   # Wait 10 seconds before first check to allow container startup
-  periodSeconds: 30         # Check every 30 seconds
-
-# Volumes and mounts (if needed)
-volumes: []                  # Define extra volumes here
-volumeMounts: []             # Define mounts inside the container here
-
-# Node selection and scheduling
-nodeSelector: {}
+  periodSeconds: 30         # Check every 30 seconds