apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: gitea-secrets
  namespace: gitea
spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: bitwarden
  data:
  - remoteRef:
      key: gitea secrets
      property: GITEA__security__SECRET_KEY
    secretKey: GITEA__security__SECRET_KEY
  - remoteRef:
      key: gitea secrets
      property: GITEA__oauth2__JWT_SECRET
    secretKey: GITEA__oauth2__JWT_SECRET
  - remoteRef:
      key: gitea secrets
      property: GITEA__security__INTERNAL_TOKEN
    secretKey: GITEA__security__INTERNAL_TOKEN
  - remoteRef:
      key: gitea secrets
      property: GITEA__server__LFS_JWT_SECRET
    secretKey: GITEA__server__LFS_JWT_SECRET
  refreshInterval: 5m
  target:
    creationPolicy: Owner
    deletionPolicy: Delete
    name: gitea-secrets
    template:
      mergePolicy: "Merge"
      data: {}