Implement external-secrets with the Bitwarden integration for user-related secrets

[mircea-pavel-anton]

Currently, all secrets are managed locally using sops. This is ok for infra-related stuff, like tokens or webhook urls, but for user passwords and such, Bitwarden would be better.

References:

• https://external-secrets.io/latest/examples/bitwarden/

[remkolems]

I believe you also use TrueNAS Scale, therefore with Truecharts Enterprise you could use vaultwarden (as I do now for the same reasons as you do). However contemplating on a more self-managed GitOps/IaC solution as Truecharts did make some unfortune braking changes in the past.

• https://truecharts.org/charts/enterprise/vaultwarden/)[https://truecharts.org/charts/enterprise/vaultwarden/]

PS. Thank you BTW for https://mirceanton.com/posts/2023-11-28-the-best-os-for-kubernetes/ and https://youtu.be/4_U0KK-blXQ

[mircea-pavel-anton]

@remkolems Thanks for the suggestion!

I'm actually using TrueNAS Core, not Scale, as I don't really like the built-in k3s solution that much. I currently have a simple Talos VM on my TrueNAS Core server to host some utility services, and I am not 100% sure I want to self-host my vaultwarden instance tbh.

Also, not a huge fan of TrueCharts either :))