claude-botandClaude Fable 5
94aa3e2fda
home-assistant (5), immich, paperless (2): values in OpenBao KV, all verified text-safe via base64 round-trip before load. ExternalSecrets keep the old Secret names. Decryption blocks dropped from home-assistant/immich/paperless KS plus the dormant one on speech-to-phrase. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CRgBFn9m8a2ncFMLusikH6
16 lines
343 B
YAML
16 lines
343 B
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: immich-secrets
|
|
namespace: immich
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: openbao
|
|
target:
|
|
name: immich-secrets # keeps the old Secret's name — consumers unchanged
|
|
dataFrom:
|
|
- extract:
|
|
key: apps/immich
|