Ultradesu
51 lines
1.3 KiB
YAML
51 lines
1.3 KiB
YAML
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: amneziawg-server
|
|
spec:
|
|
target:
|
|
name: amneziawg-server
|
|
deletionPolicy: Delete
|
|
template:
|
|
type: Opaque
|
|
data:
|
|
server-public-key: |-
|
|
{{ .server_public_key }}
|
|
awg0.conf: |-
|
|
[Interface]
|
|
PrivateKey = {{ .server_private_key }}
|
|
Address = 10.8.1.1/24
|
|
ListenPort = 5847
|
|
MTU = 1376
|
|
Jc = 4
|
|
Jmin = 64
|
|
Jmax = 128
|
|
S1 = 15
|
|
S2 = 18
|
|
S3 = 20
|
|
S4 = 23
|
|
H1 = 1020325451
|
|
H2 = 3288052141
|
|
H3 = 1766607858
|
|
H4 = 2528465083
|
|
PostUp = /scripts/firewall-up.sh 5847 10.8.1.0/24
|
|
PostDown = /scripts/firewall-down.sh 5847 10.8.1.0/24
|
|
data:
|
|
- secretKey: server_private_key
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 3092dc7c-41dd-461a-9f7a-377727f47e93
|
|
property: fields[0].value
|
|
- secretKey: server_public_key
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 3092dc7c-41dd-461a-9f7a-377727f47e93
|
|
property: fields[1].value
|