---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: gluetun-wgconfig
spec:
  secretStoreRef:
    name: vault-wheatley
    kind: ClusterSecretStore
  target:
    name: gluetun-wgconfig
    template:
      data:
        wg0.conf: "{{ .config }}"
  data:
    - secretKey: config
      remoteRef:
        key: secrets/managed/soulseekd/protonvpn-wgconfig
        property: config

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: slskd-env-secrets
spec:
  secretStoreRef:
    name: vault-wheatley
    kind: ClusterSecretStore
  target:
    name: slskd-env-secrets
  data:
    - secretKey: SLSKD_VPN_GLUETUN_API_KEY
      remoteRef:
        key: secrets/managed/soulseekd/slskd-env-secrets
        property: GLUETUN_API_KEY
    - secretKey: SLSKD_SLSK_USERNAME
      remoteRef:
        key: secrets/managed/soulseekd/slskd-env-secrets
        property: SLSK_USERNAME
    - secretKey: SLSKD_SLSK_PASSWORD
      remoteRef:
        key: secrets/managed/soulseekd/slskd-env-secrets
        property: SLSK_PASSWORD
    - secretKey: SLSKD_PASSWORD
      remoteRef:
        key: secrets/managed/soulseekd/slskd-env-secrets
        property: SLSKD_PASSWORD
    - secretKey: SLSKD_API_KEY
      remoteRef:
        key: secrets/managed/soulseekd/slskd-env-secrets
        property: API_KEY

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: gluetun-env-secrets
spec:
  secretStoreRef:
    name: vault-wheatley
    kind: ClusterSecretStore
  target:
    name: gluetun-env-secrets
  data:
    - secretKey: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
      remoteRef:
        key: secrets/managed/soulseekd/gluetun-env-secrets
        property: HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE