80 lines
2.0 KiB
YAML
80 lines
2.0 KiB
YAML
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: amneziawg-server
|
|
spec:
|
|
target:
|
|
name: amneziawg-server
|
|
deletionPolicy: Delete
|
|
template:
|
|
type: Opaque
|
|
data:
|
|
server-public-key: |-
|
|
{{ .server_public_key }}
|
|
awg0.conf: |-
|
|
[Interface]
|
|
PrivateKey = {{ .server_private_key }}
|
|
Address = 10.8.0.1/16
|
|
ListenPort = 5848
|
|
MTU = 1376
|
|
Jc = 5
|
|
Jmin = 96
|
|
Jmax = 320
|
|
S1 = 37
|
|
S2 = 47
|
|
S3 = 29
|
|
S4 = 43
|
|
H1 = 1247270921
|
|
H2 = 1956534873
|
|
H3 = 886504771
|
|
H4 = 1623791047
|
|
PostUp = /scripts/firewall-up.sh 5848 10.8.0.0/16
|
|
PostDown = /scripts/firewall-down.sh 5848 10.8.0.0/16
|
|
data:
|
|
- secretKey: server_private_key
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 3092dc7c-41dd-461a-9f7a-377727f47e93
|
|
property: fields[0].value
|
|
- secretKey: server_public_key
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 3092dc7c-41dd-461a-9f7a-377727f47e93
|
|
property: fields[1].value
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: amnezia-fellow
|
|
spec:
|
|
target:
|
|
name: amnezia-fellow
|
|
deletionPolicy: Delete
|
|
template:
|
|
engineVersion: v2
|
|
type: Opaque
|
|
data:
|
|
database-url: |-
|
|
postgresql://amnezia_fellow:{{ .amnezia_fellow | urlquery }}@psql.psql.svc:5432/amnezia_fellow
|
|
postgres-password: |-
|
|
{{ .amnezia_fellow }}
|
|
data:
|
|
- secretKey: amnezia_fellow
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
conversionStrategy: Default
|
|
decodingStrategy: None
|
|
metadataPolicy: None
|
|
key: 2a9deb39-ef22-433e-a1be-df1555625e22
|
|
property: fields[19].value
|