feat: enable persistence and add external secret integration for open-webui

09_homelab_apps/homelab-apps/templates/openwebui.yaml

@@ -19,6 +19,11 @@ spec:
         service:
           type: LoadBalancer
           
+        persistence:
+          enabled: true
+          size: 10Gi
+          storageClassName: nfs-csi
+
         websocket:
           enabled: true
           manager: redis
@@ -45,9 +50,27 @@ spec:
             - name: shared-gateway
               namespace: default
           
-          extraEnvVars:
-            - name: WEBUI_URL
-              value: "https://open-webui.k8s.hnrx.net"
+        extraEnvVars:
+          - name: WEBUI_URL
+            value: "https://open-webui.k8s.hnrx.net"
+
+        extraResources:
+        - apiVersion: external-secrets.io/v1
+          kind: ExternalSecret
+          metadata:
+            name: open-webui-external-secret
+            namespace: open-webui
+          spec:
+            refreshInterval: "1h"
+            secretStoreRef:
+              name: openbao-secretstore
+              kind: ClusterSecretStore
+            target:
+              name: open-webui
+              creationPolicy: Owner
+            dataFrom:
+              - extract:
+                  key: open-webui 
             
   syncPolicy:
     automated: