add diun, migrate pw

argocd/applications.yaml

@@ -472,3 +472,23 @@ spec:
       - ServerSideApply=true
     automated:
       enabled: true
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: diun
+  namespace: argocd
+spec:
+  destination:
+    namespace: diun
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    path: argocd/infra/diun
+    repoURL: https://gogs.jibby.org/jhb2345/server
+    targetRevision: HEAD
+  syncPolicy:
+    syncOptions:
+      - CreateNamespace=true
+    automated:
+      enabled: true

argocd/infra/diun/diun.yaml

@@ -1,10 +1,5 @@
 ---
 apiVersion: v1
-kind: Namespace
-metadata:
-    name: diun
----
-apiVersion: v1
 kind: ServiceAccount
 metadata:
   namespace: diun
@@ -95,3 +90,27 @@ spec:
         - name: data
           persistentVolumeClaim:
             claimName: diun-pvc
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: diun-ntfy-token
+  namespace: diun
+spec:
+  target:
+    name: diun-ntfy-token
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        ntfy-token: |-
+          {{ .token }}
+  data:
+    - secretKey: token
+      sourceRef:
+        storeRef:
+          name: bitwarden-notes
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 460f814b-e777-4440-b10a-b3f7013b8337