apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: firecrawl-secrets
  namespace: firecrawl
  labels:
    app.kubernetes.io/name: firecrawl
    app.kubernetes.io/component: secrets
    app.kubernetes.io/part-of: firecrawl
spec:
  refreshInterval: 1h
  secretStoreRef:
    kind: ClusterSecretStore
    name: onepassword-connect
  target:
    name: firecrawl-secrets
    creationPolicy: Owner
    template:
      engineVersion: v2
      type: Opaque
      data:
        # PostgreSQL database password
        POSTGRES_PASSWORD: "{{ .postgresPassword }}"
        # Redis Bull queue admin UI authentication key
        BULL_AUTH_KEY: "{{ .bullAuthKey }}"
  data:
    - secretKey: postgresPassword
      remoteRef:
        key: firecrawl
        property: postgres-password
    - secretKey: bullAuthKey
      remoteRef:
        key: firecrawl
        property: bull-auth-key