apiVersion: v1
kind: Secret
metadata:
    name: paperless
data:
    PAPERLESS_ADMIN_USER: ${repo.vault.password_for("paperless_admin_user").b64encode().value}
    PAPERLESS_ADMIN_MAIL: ${repo.vault.password_for("paperless_admin_mail").b64encode().value}
    PAPERLESS_ADMIN_PASSWORD: ${repo.vault.password_for("paperless_admin_pw").b64encode().value}
    PAPERLESS_SECRET_KEY: ${repo.vault.password_for("paperless_secret_key").b64encode().value}
    PAPERLESS_SOCIALACCOUNT_PROVIDERS: ${repo.libs.util.base64('{"openid_connect":{"SCOPE":["openid","profile","email"],"OAUTH_PKCE_ENABLED":true,"APPS":[{"provider_id":"authelia","name":"Authelia","client_id":"paperless","secret":"%s","settings":{"server_url":"https://login.gzr.im","token_auth_method":"client_secret_basic"}}]}}' % repo.vault.cmd(f"rbw get authelia/client/paperless"))}