From 404f4301e37ac6ad5e0ed8cf54ddb695a6142acb Mon Sep 17 00:00:00 2001
From: j37hr0 <jethro.cotton3@gmail.com>
Date: Wed, 6 May 2026 20:38:37 +1200
Subject: [PATCH] fixing mail secrets

---
 apps/lubelogger/kustomization.yaml          |  1 +
 apps/lubelogger/lubelogger-mail-secret.yaml | 31 +++++++++++++++++++++
 2 files changed, 32 insertions(+)
 create mode 100644 apps/lubelogger/lubelogger-mail-secret.yaml

diff --git a/apps/lubelogger/kustomization.yaml b/apps/lubelogger/kustomization.yaml
index 550c9d8..ea87e2e 100644
--- a/apps/lubelogger/kustomization.yaml
+++ b/apps/lubelogger/kustomization.yaml
@@ -3,6 +3,7 @@ resources:
 - helmrelease.yaml
 - certificate.yaml
 - lubelogger-db-connection.yaml
+- lubelogger-mail-secret.yaml
 - db
 
 namespace: lubelogger
diff --git a/apps/lubelogger/lubelogger-mail-secret.yaml b/apps/lubelogger/lubelogger-mail-secret.yaml
new file mode 100644
index 0000000..db8a819
--- /dev/null
+++ b/apps/lubelogger/lubelogger-mail-secret.yaml
@@ -0,0 +1,31 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: lubelogger-mail-secret
+  namespace: lubelogger
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: bitwarden
+    kind: ClusterSecretStore
+
+  target:
+    name: lubelogger-mail
+    creationPolicy: Owner
+    template:
+      engineVersion: v2
+      mergePolicy: Merge
+      data:
+        MailConfig__EmailServer: smtp.gmail.com
+        MailConfig__EmailFrom: '{{ index . "gmail-email-address" }}'
+        MailConfig__Port: "587"
+        MailConfig__Username: '{{ index . "gmail-email-address" }}'
+        MailConfig__Password: '{{ index . "gmail-app-password" }}'
+
+  data:
+    - secretKey: gmail-email-address
+      remoteRef:
+        key: gmail-email-address
+    - secretKey: gmail-app-password
+      remoteRef:
+        key: gmail-app-password