# DO NOT COMMIT real values. Create out-of-band in namespace "obsidian":
#
#   ob login     # once, on a trusted machine
#   kubectl create namespace obsidian   # if Argo hasn't created it yet
#   kubectl -n obsidian create secret generic obsidian-sync \
#     --from-file=auth_token=<path to auth_token in your obsidian-headless config dir> \
#     --from-literal=vault_name='<exact remote vault name>' \
#     --from-literal=e2ee_password='<only if the vault uses E2EE>'
apiVersion: v1
kind: Secret
metadata:
  name: obsidian-sync
  namespace: obsidian
type: Opaque
stringData:
  auth_token: "REPLACE"
  vault_name: "REPLACE"
  # e2ee_password: "REPLACE"