apiVersion: secrets.infisical.com/v1alpha1
kind: InfisicalSecret
metadata:
  name: secrets
spec:
  authentication:
    universalAuth:
      secretsScope:
        recursive: true
  managedSecretReference:
    template:
      data:
        secrets.yaml: |
          postgres:
            host: postgres-svc.core.svc.cluster.local
            port: 5432
            database: comentario
            username: comentario
            password: "{{ .POSTGRES_PASSWORD.Value }}"
          smtpServer:
            host: blizzard.mxrouting.net
            port: 465
            username: comments@leechpepin.com
            password: "{{ .SMTP_PASSWORD.Value }}"

          idp:
            github:
              key: "{{ .GITHUB_CLIENT_ID.Value }}"
              secret: "{{ .GITHUB_CLIENT_SECRET.Value }}"
            gitlab:
              key: "{{ .GITLAB_CLIENT_ID.Value }}"
              secret: "{{ .GITLAB_CLIENT_SECRET.Value }}"
            google:
              key: "{{ .GOOGLE_CLIENT_ID.Value }}"
              secret: "{{ .GOOGLE_CLIENT_SECRET.Value }}"
              disable: true

          extensions:
            akismet:
              disable: true
            apiLayerSpamChecker:
              key: "{{ .APILAYER_SPAMCHECKER_APIKEY.Value }}"
            perspective:
              apiKey: "{{ .PERSPECTIVE_APIKEY.Value }}"

          xsrfSecret: "{{ .XSRF_SECRET.Value }}"