---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: remnawave-secrets
spec:
  target:
    name: remnawave-secrets
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        DATABASE_URL: |-
          postgresql://remnawave:{{ .pg_pass }}@psql.psql.svc:5432/remnawave
#       JWT_AUTH_SECRET: |-
#         {{ .jwt_auth_secret }}
#       JWT_API_TOKENS_SECRET: |-
#         {{ .jwt_api_tokens_secret }}
#       METRICS_USER: |-
#         {{ .metrics_user }}
#       METRICS_PASS: |-
#         {{ .metrics_pass }}

  data:
    - secretKey: pg_pass
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 2a9deb39-ef22-433e-a1be-df1555625e22
        property: fields[10].value
#   - secretKey: jwt_auth_secret
#     sourceRef:
#       storeRef:
#         name: vaultwarden-login
#         kind: ClusterSecretStore
#     remoteRef:
#       key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
#       property: login.password
#   - secretKey: jwt_api_tokens_secret
#     sourceRef:
#       storeRef:
#         name: vaultwarden-login
#         kind: ClusterSecretStore
#     remoteRef:
#       key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
#       property: login.password
#   - secretKey: metrics_user
#     sourceRef:
#       storeRef:
#         name: vaultwarden-login
#         kind: ClusterSecretStore
#     remoteRef:
#       key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
#       property: login.username
#   - secretKey: metrics_pass
#     sourceRef:
#       storeRef:
#         name: vaultwarden-login
#         kind: ClusterSecretStore
#     remoteRef:
#       key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
#       property: login.password