{{- $name := printf "%s-forgejo" .Release.Name }}
---
apiVersion: v1
kind: Secret
metadata:
  name: {{ $name | quote }}
data:
  DATABASE_PASSWD: {{ .Values.databases.forgejo.password | default (derivePassword 1 "long" .Values.commons.masterPassword "git-forgejo" "database_password" | b64enc) | b64enc }}
  MAILER_PASSWD: {{ .Values.commons.mail.password | b64enc }}
  # for OIDC
  key: {{ .Values.auth.clientID | default $name | b64enc }}
  secret: {{ .Values.auth.clientSecret | default (derivePassword 1 "long" .Values.commons.masterPassword "git-forgejo" "auth.clientSecret") | b64enc }}