From 8a6f9f67587420c2bb1ac260841e4071f0adf65d Mon Sep 17 00:00:00 2001
From: Gabriel Simmer <g@gmem.ca>
Date: Sat, 5 Aug 2023 12:02:00 +0100
Subject: [PATCH] Swap to S3 for Vaultwarden Litestream

---
 homelab/vaultwarden-s3.env.age |  9 +++++++++
 homelab/vaultwarden.yml        | 29 +++++++----------------------
 2 files changed, 16 insertions(+), 22 deletions(-)
 create mode 100644 homelab/vaultwarden-s3.env.age

diff --git a/homelab/vaultwarden-s3.env.age b/homelab/vaultwarden-s3.env.age
new file mode 100644
index 0000000..927e5ca
--- /dev/null
+++ b/homelab/vaultwarden-s3.env.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> piv-p256 JccfSQ AhIbgVYw7nnbfVvpM2755rvolAK+7TVKMYV7+7HXweKW
+tpz/Ea90ttJQanaA033mrIgMzKtIOgiBkcfNY9qPPyM
+-> D-grease &[o{ }PTMp/+M y!I
+4B6KLBrcEWiTzcCyfN+EKTd0j9rOPe9RP5KFM87HAmFAOR7fa4yOousUqFvP32Xw
+Xs8hyC4vT+P3buXFMPR/k9yrzJcAOdmB
+--- e930foLDztNKnvtkkj6phGiXCo6z02hczVmScHC0uw8
+Y	�_��A�W�"#W@^���y4�!��Hz
+��)�0O�i5�9�V�7r֦�Q�(��	�͚{l�.B���R����ćU+�h�!h[(��1���t #�蹌��J�X����xN�C��)�i��\t��q
\ No newline at end of file
diff --git a/homelab/vaultwarden.yml b/homelab/vaultwarden.yml
index df2d019..5f01185 100644
--- a/homelab/vaultwarden.yml
+++ b/homelab/vaultwarden.yml
@@ -30,17 +30,9 @@ spec:
           - name: litestream
             mountPath: /etc/litestream.yml
             subPath: vaultwarden.yml
-          env:
-          - name: LITESTREAM_USERNAME
-            valueFrom:
-              secretKeyRef:
-                name: litestream
-                key: username
-          - name: LITESTREAM_PASSWORD
-            valueFrom:
-              secretKeyRef:
-                name: litestream
-                key: password
+          envFrom:
+            - secretRef:
+                name: vaultwarden-litestream-s3
 
       containers:
       - name: vaultwarden
@@ -70,17 +62,9 @@ spec:
         - name: litestream
           mountPath: /etc/litestream.yml
           subPath: vaultwarden.yml
-        env:
-        - name: LITESTREAM_USERNAME
-          valueFrom:
-            secretKeyRef:
-              name: litestream
-              key: username
-        - name: LITESTREAM_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: litestream
-              key: password
+        envFrom:
+          - secretRef:
+              name: vaultwarden-litestream-s3
         ports:
         - name: metrics
           containerPort: 9090
@@ -96,6 +80,7 @@ spec:
   - metadata:
       name: data
     spec:
+      storageClassName: nfs-client
       accessModes: [ "ReadWriteOnce" ]
       resources:
         requests: