resource "vault_generic_secret" "ansible_secrets" {
  for_each = fileset("/home/xenrox/decrypted/vault", "*.json")

  path      = trimsuffix("ansible/${each.key}", ".json")
  data_json = file("/home/xenrox/decrypted/vault/${each.key}")
}

# keycloak users

resource "vault_generic_secret" "users" {
  for_each = fileset("/home/xenrox/decrypted/vault/users", "*.json")

  path      = trimsuffix("ansible/users/${each.key}", ".json")
  data_json = file("/home/xenrox/decrypted/vault/users/${each.key}")
}

# wireguard keys

resource "vault_generic_secret" "wireguard" {
  for_each = fileset("/home/xenrox/decrypted/wireguard", "*")

  path = "ansible/wireguard/${each.key}"
  data_json = jsonencode({
    content = file("/home/xenrox/decrypted/wireguard/${each.key}")
  })
}

# wireguard VPN keys
#
resource "vault_generic_secret" "wireguard_vpn" {
  for_each = fileset("/home/xenrox/decrypted/wireguard_vpn", "*")

  path = "ansible/wireguard_vpn/${each.key}"
  data_json = jsonencode({
    content = file("/home/xenrox/decrypted/wireguard_vpn/${each.key}")
  })
}