#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
source "$SCRIPT_DIR/../../.env"

kubectl create secret generic gitea-postgres-secret \
  --namespace=gitea \
  --from-literal=postgresql-password="${GITEA_POSTGRES_PASSWORD}" \
  --dry-run=client -o yaml \
  | kubeseal \
      --controller-namespace=kube-system \
      --controller-name=sealed-secrets-controller \
      --format yaml \
      > "$SCRIPT_DIR/gitea-postgres-sealed.yaml"

echo "Wrote $SCRIPT_DIR/gitea-postgres-sealed.yaml"