apiVersion: onepassword.com/v1
kind: OnePasswordItem
metadata:
  name: {{ .Release.Name }}-{{ .Chart.Name }}-secret
spec:
  # The item must carry a "secret-key" field; it becomes SEARXNG_SECRET and
  # thereby server.secret_key, which signs the settings cookie and the
  # image-proxy URLs. Without it SearXNG exits 1 at start (webapp.py refuses
  # to run on the upstream placeholder), so the value is required.
  itemPath: {{ required "You must provide a searxng Secret Reference (secrets.searxngSecretRef)" .Values.secrets.searxngSecretRef }}