apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: stalwart-delivery
  namespace: stalwart
spec:
  type: kv-v2
  mount: secret
  path: stalwart/oci-email-delivery
  refreshAfter: 1h
  destination:
    name: stalwart-delivery
    create: true
    transformation:
      excludeRaw: true
      excludes:
        - .*
      templates:
        relay_endpoint:
          text: '{{ get .Secrets "endpoint" }}'
        relay_password:
          text: '{{ get .Secrets "password" }}'
        relay_username:
          text: '{{ get .Secrets "username" }}'
  vaultAuthRef: default