k3s/services/matrix/matrix-external-secrets.yaml
2026-06-22 18:48:26 -04:00

62 lines
1.4 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: matrix-secrets
namespace: matrix
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: matrix-secrets
creationPolicy: Owner
data:
- secretKey: LIVEKIT_KEY
remoteRef:
key: matrix
property: livekit-key
- secretKey: LIVEKIT_SECRET
remoteRef:
key: matrix
property: livekit-secret
- secretKey: CLIENT_ID
remoteRef:
key: matrix
property: client-id
- secretKey: CLIENT_SECRET
remoteRef:
key: matrix
property: client-secret
- secretKey: POSTGRES_USER
remoteRef:
key: matrix
property: postgres-user
- secretKey: POSTGRES_PASSWORD
remoteRef:
key: matrix
property: postgres-password
- secretKey: SYNAPSE_MACAROON_KEY
remoteRef:
key: matrix
property: synapse-macaroon
- secretKey: SYNAPSE_REGISTRATION_SECRET
remoteRef:
key: matrix
property: synapse-registration
- secretKey: MAS_SYNAPSE_ADMIN_SECRET
remoteRef:
key: matrix
property: mas-synapse-admin
- secretKey: MAS_SYNAPSE_CLIENT_SECRET
remoteRef:
key: matrix
property: mas-synapse-client
- secretKey: MAS_ENCRYPTION_SECRET
remoteRef:
key: matrix
property: mas-encryption-secret
- secretKey: MAS_RSA_KEY
remoteRef:
key: matrix
property: mas-rsa-key