---
# yamllint disable
apiVersion: v1
kind: Secret
metadata:
  name: cluster-secrets
  namespace: flux-system
stringData:
  SECRET_DOMAIN: ${SECRET_DOMAIN}
  SECRET_DEFAULT_USER: ${SECRET_DEFAULT_USER}
  SECRET_DEFAULT_EMAIL: ${SECRET_DEFAULT_EMAIL}
  SECRET_DEFAULT_PWD: ${SECRET_DEFAULT_PASSWORD}
  # cert-manager
  SECRET_CLOUDFLARE_EMAIL: ${SECRET_CLOUDFLARE_EMAIL}
  SECRET_CLOUDFLARE_TOKEN: ${SECRET_CLOUDFLARE_TOKEN}
  # democratic-csi
  SECRET_TRUENAS_APIKEY: ${SECRET_TRUENAS_APIKEY}
  SECRET_TRUENAS_IP: ${SECRET_TRUENAS_IP}
  SECRET_TRUENAS_USER: ${SECRET_TRUENAS_USER}
  # TRUENAS_SSHKEY: |
  #   ${SECRET_TRUENAS_SSHKEY}

  # velero
  SECRET_B2_ACCESS_KEY: ${SECRET_B2_ACCESS_KEY}
  SECRET_B2_SECRET_KEY: ${SECRET_B2_SECRET_KEY}

  # db (generic)
  SECRET_DB_ROOT_PWD: ${SECRET_DB_ROOT_PWD}
  SECRET_DB_USER_PWD: ${SECRET_DB_USER_PWD}

  # email notifications
  SECRET_SMTP_ADDRESS: ${SECRET_SMTP_ADDRESS}
  SECRET_SMTP_USER: ${SECRET_SMTP_USER}
  SECRET_SMTP_PWD: ${SECRET_SMTP_PWD}

  # vaultwarden
  SECRET_VAULTWARDEN_TOKEN: ${SECRET_VAULTWARDEN_TOKEN}

  # authentik / IDP
  SECRET_AUTHENTIK_KEY: ${SECRET_AUTHENTIK_KEY}
  SECRET_MAXMIND_ACCOUNT_ID: ${SECRET_MAXMIND_ACCOUNT_ID}
  SECRET_MAXMIND_LICENSE_KEY: ${SECRET_MAXMIND_LICENSE_KEY}

  # keycloak
  SECRET_KEYCLOAK_REALM: ${SECRET_KEYCLOAK_REALM}

  # oauth2-proxy / k8s-dashboard / keycloak
  SECRET_DASHBOARD_CLIENT_ID: ${SECRET_DASHBOARD_CLIENT_ID}
  SECRET_DASHBOARD_CLIENT_SECRET: ${SECRET_DASHBOARD_CLIENT_SECRET}
  SECRET_OAUTH_COOKIE_SECRET: ${SECRET_OAUTH_COOKIE_SECRET}
