add cloudflare api token

2026-03-19 18:13:13 -04:00
parent 425f9ee792
commit 33f0e30229
4 changed files with 24 additions and 3 deletions
--- a/kubernetes/secrets/cert-manager/cloudflare-api-token.nix
+++ b/kubernetes/secrets/cert-manager/cloudflare-api-token.nix
@@ -0,0 +1,17 @@
+{ config, ... }:
+{
+    sops.templates."cloudflare-api-token.yaml" = {
+        mode = "0444";
+        content = ''
+            apiVersion: v1
+            kind: Secret
+            metadata:
+                name: cloudflare-api-token
+                namespace: cert-manager
+            type: Opaque
+            stringData:
+                api-token: ${config.sops.placeholder.cloudflare_api_token}
+        '';
+        path = "/var/lib/rancher/k3s/server/manifests/secrets/cloudflare-api-token.yaml";
+    };
+}
--- a/kubernetes/secrets/default.nix
+++ b/kubernetes/secrets/default.nix
@@ -2,5 +2,6 @@
  imports = [
    ./cloudnativepg/s3-backup-creds.nix
    ./cloudnativepg/weyma-pgsql-replication.nix
+    ./cert-manager/cloudflare-api-token.nix
  ];
 }