update default deny

Signed-off-by: gwg313 <gwg313@pm.me>

audiobookshelf/deployment.yaml

@@ -1,3 +1,8 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: audiobookshelf
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -5,6 +10,8 @@ metadata:
   namespace: audiobookshelf
 spec:
   replicas: 1
+  strategy:
+    type: Recreate
   selector:
     matchLabels:
       app: audiobookshelf
@@ -15,9 +22,15 @@ spec:
     spec:
       containers:
         - name: audiobookshelf
-          image: registry.gwg313.xyz/library/audiobookshelf-rootless:latest
+          image: ghcr.io/advplyr/audiobookshelf:latest
+          imagePullPolicy: IfNotPresent
           ports:
-            - containerPort: 8080
+            - containerPort: 80
+              name: http
+              protocol: TCP
+          env:
+            - name: TZ
+              value: "America/Toronto"
           volumeMounts:
             - name: audiobooks-volume
               mountPath: /audiobooks
@@ -40,3 +53,18 @@ spec:
         - name: metadata-volume
           persistentVolumeClaim:
             claimName: audiobookshelf-metadata
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: audiobookshelf-svc
+  namespace: audiobookshelf
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      port: 8080
+      targetPort: http # References the named string 'http' from the containerPort map
+      protocol: TCP
+  selector:
+    app: audiobookshelf