#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "$SCRIPT_DIR/../../.env"

kubectl create secret generic immich-postgres \
  --namespace=immich \
  --from-literal=password="${IMMICH_POSTGRES_PASSWORD}" \
  --dry-run=client -o yaml \
  | kubeseal \
      --controller-namespace=kube-system \
      --controller-name=sealed-secrets-controller \
      --format yaml \
      > "$SCRIPT_DIR/immich-postgres-sealed.yaml"

echo "Wrote $SCRIPT_DIR/immich-postgres-sealed.yaml"