#!/usr/bin/env bash
# Usage: bash manifests/network/ddns-secret.sh
# Description: Creates the Porkbun DDNS API credentials secret
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
ENV_FILE="$SCRIPT_DIR/../../.env"

if [ ! -f "$ENV_FILE" ]; then
  echo "Error: .env file not found"
  exit 1
fi

source "$ENV_FILE"

kubectl create secret generic porkbun-ddns \
  --namespace ddns \
  --from-literal=api-key="$PORKBUN_API_KEY" \
  --from-literal=secret-api-key="$PORKBUN_SECRET_KEY" \
  --dry-run=client -o yaml | kubectl apply -f -

echo "Secret applied"