---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: amneziawg-server
spec:
  target:
    name: amneziawg-server
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        server-public-key: |-
          {{ .server_public_key }}
        awg0.conf: |-
          [Interface]
          PrivateKey = {{ .server_private_key }}
          Address = 10.8.1.1/24
          ListenPort = 5847
          MTU = 1376
          Jc = 4
          Jmin = 64
          Jmax = 128
          S1 = 15
          S2 = 18
          S3 = 20
          S4 = 23
          H1 = 1020325451
          H2 = 3288052141
          H3 = 1766607858
          H4 = 2528465083
          PostUp = /scripts/firewall-up.sh 5847 10.8.1.0/24
          PostDown = /scripts/firewall-down.sh 5847 10.8.1.0/24
  data:
    - secretKey: server_private_key
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 3092dc7c-41dd-461a-9f7a-377727f47e93
        property: fields[0].value
    - secretKey: server_public_key
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 3092dc7c-41dd-461a-9f7a-377727f47e93
        property: fields[1].value