woodpecker: immich moves to Pattern C - provision immich_db_password + immich_kiosk_basicauth

.woodpecker.yml

@@ -63,6 +63,10 @@ steps:
         from_secret: homeassistant_frigate_rtsp_password
       HOMEASSISTANT_IMMICH_API_KEY:
         from_secret: homeassistant_immich_api_key
+      IMMICH_DB_PASSWORD:
+        from_secret: immich_db_password
+      IMMICH_KIOSK_BASICAUTH:
+        from_secret: immich_kiosk_basicauth
       MEALIE_DB_PASSWORD:
         from_secret: mealie_db_password
       MEALIE_LDAP_QUERY_PASSWORD:
@@ -145,8 +149,12 @@ steps:
         for STACK in $ALL_STACKS; do
           echo "Provisioning: $STACK"
           case "$STACK" in
-            maintenance|media|unifi|guacamole|security|auth|traefik|immich|meshcentral|ddm)
+            maintenance|media|unifi|guacamole|security|auth|traefik|meshcentral|ddm)
               echo "  No Docker secrets for $STACK — secrets in host .env";;
+            immich)
+              ssh -o StrictHostKeyChecking=no root@${SWARM_MANAGER_IP} "source /tmp/cs.sh
+                create_or_update_secret 'immich_db_password'     '${IMMICH_DB_PASSWORD}'
+                create_or_update_secret 'immich_kiosk_basicauth' '${IMMICH_KIOSK_BASICAUTH}'";;
             woodpecker)
               echo "  Manual only — skipping";;
             3dprint)