Will Anderson
d3289895e5
- external-secrets: add qbittorrent, jellyfin, seerr keys from Vault - pvc: document all media folder paths (movies, tv, anime, docs, standup, concerts, kids, music) - jellyfin: init container creates all media subdirs on startup
36 lines
917 B
YAML
36 lines
917 B
YAML
# media-secrets — ProtonVPN WireGuard credentials + service API keys
|
|
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: media-secrets
|
|
namespace: media
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: vault
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: media-secrets
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: PROTONVPN_PRIVATE_KEY
|
|
remoteRef:
|
|
key: secret/data/protonvpn
|
|
property: private_key
|
|
- secretKey: QBITTORRENT_USERNAME
|
|
remoteRef:
|
|
key: secret/data/qbittorrent
|
|
property: username
|
|
- secretKey: QBITTORRENT_PASSWORD
|
|
remoteRef:
|
|
key: secret/data/qbittorrent
|
|
property: password
|
|
- secretKey: JELLYFIN_API_KEY
|
|
remoteRef:
|
|
key: secret/data/jellyfin
|
|
property: api_key
|
|
- secretKey: SEERR_API_KEY
|
|
remoteRef:
|
|
key: secret/data/seerr
|
|
property: api_key
|