k8scd/ente-photos/ente-photos-es.yaml

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: template
spec:
  refreshInterval: "15s"
  secretStoreRef:
    name: vault-backend
    kind: ClusterSecretStore
  target:
    name: ente-photos-config
    template:
      engineVersion: v2
      data:
        credentials.yaml: |
          db:
            host: helm-postgresql
            port: 5432
            name: ente_db
            user: pguser
            password: {{ .pgpass }}
            sslmode: disable

          s3:
            are_local_buckets: false
            ente-photos:
                key: ente-photos-user
                secret: {{ .entepass }}
                endpoint: minio.hensen.io:3200
                region: nl
                bucket: ente-photos

  data:
  - secretKey: pgpass
    remoteRef:
      key: ente-photos-postgres
      property: password
  - secretKey: entepass
    remoteRef:
      key: minio-ente-photos-user
      property: password