{{- if and .Values.immich.secret.enabled (not .Values.immich.secret.existingSecretName) -}}
apiVersion: v1
kind: Secret
metadata:
  name: {{ include "immich.fullname" . }}
  labels:
    {{- include "immich.labels" . | nindent 4 }}
type: Opaque
stringData:
  {{- if .Values.immich.config.database.password }}
  DB_PASSWORD: {{ .Values.immich.config.database.password | quote }}
  {{- end }}
  {{- if .Values.immich.config.database.username }}
  DB_USERNAME: {{ .Values.immich.config.database.username | quote }}
  {{- end }}
  {{- if .Values.immich.config.redis.password }}
  REDIS_PASSWORD: {{ .Values.immich.config.redis.password | quote }}
  {{- end }}
  {{- if .Values.immich.config.redis.username }}
  REDIS_USERNAME: {{ .Values.immich.config.redis.username | quote }}
  {{- end }}
  {{- range $key, $value := .Values.immich.secret.data }}
  {{ $key }}: {{ $value | quote }}
  {{- end }}
{{- end }}