From 988ad3b573d1f6a5ec514be4ec601fb88d1bd126 Mon Sep 17 00:00:00 2001
From: admin <alec@bryanmail.net>
Date: Thu, 2 Jul 2026 07:26:44 -0700
Subject: [PATCH] woodpecker: immich moves to Pattern C - provision
 immich_db_password + immich_kiosk_basicauth

---
 .woodpecker.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.woodpecker.yml b/.woodpecker.yml
index 2b0b7c8..de0ffb1 100644
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -63,6 +63,10 @@ steps:
         from_secret: homeassistant_frigate_rtsp_password
       HOMEASSISTANT_IMMICH_API_KEY:
         from_secret: homeassistant_immich_api_key
+      IMMICH_DB_PASSWORD:
+        from_secret: immich_db_password
+      IMMICH_KIOSK_BASICAUTH:
+        from_secret: immich_kiosk_basicauth
       MEALIE_DB_PASSWORD:
         from_secret: mealie_db_password
       MEALIE_LDAP_QUERY_PASSWORD:
@@ -145,8 +149,12 @@ steps:
         for STACK in $ALL_STACKS; do
           echo "Provisioning: $STACK"
           case "$STACK" in
-            maintenance|media|unifi|guacamole|security|auth|traefik|immich|meshcentral|ddm)
+            maintenance|media|unifi|guacamole|security|auth|traefik|meshcentral|ddm)
               echo "  No Docker secrets for $STACK — secrets in host .env";;
+            immich)
+              ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
+                create_or_update_secret 'immich_db_password'     '${IMMICH_DB_PASSWORD}'
+                create_or_update_secret 'immich_kiosk_basicauth' '${IMMICH_KIOSK_BASICAUTH}'";;
             woodpecker)
               echo "  Manual only — skipping";;
             3dprint)