kubernetes/apps/media/immich/app/externalsecret.yaml

@@ -0,0 +1,20 @@
+---
+# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: immich
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: immich-secret
+    creationPolicy: Owner
+    template:
+      engineVersion: v2
+      data:
+        JWT_SECRET: "{{ .JWT_SECRET }}"
+  dataFrom:
+    - extract:
+        key: immich

kubernetes/apps/media/immich/ks.yaml

@@ -28,3 +28,4 @@ spec:
       APP: *app
       DB_NAME: immich
       DB_USER: immich
+      VOLSYNC_CAPACITY: 1Gi