Files
homelab/k8s/apps/firefly-iii/external-secrets.yaml
T

50 lines
1.2 KiB
YAML
Raw Normal View History

2026-07-30 12:18:12 +01:00
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: firefly-secrets
spec:
refreshInterval: 1h
target:
name: firefly-secrets
creationPolicy: Owner
deletionPolicy: Delete
template:
type: Opaque
data:
# Firefly and CloudNativePG deliberately share this generated Secret.
username: firefly
password: |-
{{ .db_password }}
DB_PASSWORD: |-
{{ .db_password }}
APP_KEY: |-
{{ .app_key }}
STATIC_CRON_TOKEN: |-
{{ .cron_token }}
data:
- secretKey: db_password
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[0].value
- secretKey: app_key
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[1].value
- secretKey: cron_token
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[2].value