---
templates:
  # Root
  - src: .sops.yaml.j2
    dest: ./.sops.yaml
    encrypt: false
  # Ansible dir
  - src: ansible/supplemental.yaml.j2
    dest: ./ansible/inventory/group_vars/kubernetes/supplemental.yaml
    encrypt: false
  - src: ansible/hosts.yaml.j2
    dest: ./ansible/inventory/hosts.yaml
    encrypt: false
  # Kubernetes dir
  - src: kubernetes/kube-prometheus-stack-helmrelease.yaml.j2
    dest: ./kubernetes/apps/monitoring/kube-prometheus-stack/app/helmrelease.yaml
    encrypt: false
  - src: kubernetes/cert-manager-secret.sops.yaml.j2
    dest: ./kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml
    encrypt: true
  - src: kubernetes/cloudflared-secret.sops.yaml.j2
    dest: ./kubernetes/apps/networking/cloudflared/app/secret.sops.yaml
    encrypt: true
  - src: kubernetes/cluster-secrets.sops.yaml.j2
    dest: ./kubernetes/flux/vars/cluster-secrets.sops.yaml
    encrypt: true
  - src: kubernetes/cluster-settings.yaml.j2
    dest: ./kubernetes/flux/vars/cluster-settings.yaml
    encrypt: false
  - src: kubernetes/cluster.yaml.j2
    dest: ./kubernetes/flux/config/cluster.yaml
    encrypt: false
  - src: kubernetes/external-dns-secret.sops.yaml.j2
    dest: ./kubernetes/apps/networking/external-dns/app/secret.sops.yaml
    encrypt: true
  - src: kubernetes/github-webhook-token-secret.sops.yaml.j2
    dest: ./kubernetes/apps/flux-system/addons/webhooks/github/secret.sops.yaml
    encrypt: true
  - src: kubernetes/grafana-admin-secret.sops.yaml.j2
    dest: ./kubernetes/apps/monitoring/grafana/app/secret.sops.yaml
    encrypt: true
  - src: kubernetes/weave-gitops-secret.sops.yaml.j2
    dest: ./kubernetes/apps/flux-system/weave-gitops/app/secret.sops.yaml
    encrypt: true