---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: amneziawg-server
spec:
  target:
    name: amneziawg-server
    deletionPolicy: Delete
    template:
      type: Opaque
      data:
        server-public-key: |-
          {{ .server_public_key }}
        awg0.conf: |-
          [Interface]
          PrivateKey = {{ .server_private_key }}
          Address = 10.8.0.1/16
          ListenPort = 5848
          MTU = 1376
          Jc = 5
          Jmin = 96
          Jmax = 320
          S1 = 37
          S2 = 47
          S3 = 29
          S4 = 43
          H1 = 1247270921
          H2 = 1956534873
          H3 = 886504771
          H4 = 1623791047
          PostUp = /scripts/firewall-up.sh 5848 10.8.0.0/16
          PostDown = /scripts/firewall-down.sh 5848 10.8.0.0/16
  data:
    - secretKey: server_private_key
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 3092dc7c-41dd-461a-9f7a-377727f47e93
        property: fields[0].value
    - secretKey: server_public_key
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        key: 3092dc7c-41dd-461a-9f7a-377727f47e93
        property: fields[1].value
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: amnezia-fellow
spec:
  target:
    name: amnezia-fellow
    deletionPolicy: Delete
    template:
      engineVersion: v2
      type: Opaque
      data:
        database-url: |-
          postgresql://amnezia_fellow:{{ .amnezia_fellow | urlquery }}@psql.psql.svc:5432/amnezia_fellow
        postgres-password: |-
          {{ .amnezia_fellow }}
  data:
    - secretKey: amnezia_fellow
      sourceRef:
        storeRef:
          name: vaultwarden-login
          kind: ClusterSecretStore
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        metadataPolicy: None
        key: 2a9deb39-ef22-433e-a1be-df1555625e22
        property: fields[19].value