From f7a21fe7044024bb351f01c011201fb80999bb1c Mon Sep 17 00:00:00 2001
From: Morten Olsen <fbtijfdq@void.black>
Date: Fri, 2 Jan 2026 14:32:30 +0100
Subject: [PATCH] initial immich migration

---
 apps/charts/immich/Chart.yaml              |  4 ++++
 apps/charts/immich/templates/database.yaml | 11 ++---------
 apps/charts/immich/values.yaml             |  9 +++++++++
 3 files changed, 15 insertions(+), 9 deletions(-)

diff --git a/apps/charts/immich/Chart.yaml b/apps/charts/immich/Chart.yaml
index 3457753..06d9e72 100644
--- a/apps/charts/immich/Chart.yaml
+++ b/apps/charts/immich/Chart.yaml
@@ -1,3 +1,7 @@
 apiVersion: v2
 version: 1.0.0
 name: immich
+dependencies:
+  - name: common
+    version: 1.0.0
+    repository: file://../../common
diff --git a/apps/charts/immich/templates/database.yaml b/apps/charts/immich/templates/database.yaml
index 37e87a2..5628c63 100644
--- a/apps/charts/immich/templates/database.yaml
+++ b/apps/charts/immich/templates/database.yaml
@@ -1,12 +1,5 @@
-apiVersion: homelab.mortenolsen.pro/v1
-kind: GenerateSecret
-metadata:
-  name: "{{ .Release.Name }}-postgres-secret"
-spec:
-  fields:
-    - name: password
-      encoding: base64
-      length: 64
+{{ include "common.externalSecrets.passwordGenerators" . }}
+{{ include "common.externalSecrets.externalSecrets" . }}
 
 ---
 apiVersion: v1
diff --git a/apps/charts/immich/values.yaml b/apps/charts/immich/values.yaml
index 2fe15d4..d3333fb 100644
--- a/apps/charts/immich/values.yaml
+++ b/apps/charts/immich/values.yaml
@@ -19,3 +19,12 @@ postgres:
     repository: pgvector/pgvector
     tag: pg16@sha256:0a07c4114ba6d1d04effcce3385e9f5ce305eb02e56a3d35948a415a52f193ec
     pullPolicy: IfNotPresent
+
+# External secrets configuration
+externalSecrets:
+  - name: "{release}-postgres-secret"
+    passwords:
+      - name: password
+        length: 64
+        encoding: base64
+        allowRepeat: true