---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: telemt-secret
spec:
  target:
    name: telemt-secret
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        SECRET: |-
          {{ .secret }}
        PORT: "30444"
        config.toml: |
          [general]
          use_middle_proxy = true
          log_level = "normal"

          [general.modes]
          classic = false
          secure = false
          tls = true

          [general.links]
          show = "*"
          public_port = 30444

          [server]
          port = 30444
          metrics_port = 9090

          [server.api]
          enabled = true
          listen = "0.0.0.0:9091"
          whitelist = ["0.0.0.0/0"]

          [[server.listeners]]
          ip = "0.0.0.0"

          [censorship]
          tls_domain = "ya.ru"
          mask = true
          tls_emulation = true
          tls_front_dir = "tlsfront"

          [access.users]
          user = "{{ .secret }}"
  data:
    - secretKey: secret
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 58a37daf-72d8-430d-86bd-6152aa8f888d
        property: fields[0].value