apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: stalwart-runtime
  namespace: stalwart
spec:
  type: kv-v2
  mount: secret
  path: stalwart/runtime
  refreshAfter: 1h
  destination:
    name: stalwart-runtime
    create: true
    transformation:
      templates:
        dragonfly_url:
          text: 'redis://default:{{ get .Secrets "dragonfly_password" }}@stalwart.dragonfly.svc.cluster.local:6379'
  vaultAuthRef: default