From 9a0e03657a41ad77ad3cdabeca18387f8b7319df Mon Sep 17 00:00:00 2001
From: poslop <poslop@archfox.org>
Date: Tue, 21 Jul 2026 21:25:58 -0500
Subject: [PATCH] netbird: pull encryptionKey from k8s secret

---
 modules/k3s/netbird/server.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/modules/k3s/netbird/server.yaml b/modules/k3s/netbird/server.yaml
index d03da54..4b954e2 100644
--- a/modules/k3s/netbird/server.yaml
+++ b/modules/k3s/netbird/server.yaml
@@ -22,6 +22,12 @@ spec:
             - containerPort: 3479
               protocol: UDP
             - containerPort: 33073
+          env:
+            - name: NETBIRD_STORE_ENCRYPTION_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: netbird-encryption
+                  key: encryptionKey
           volumeMounts:
             - name: config
               mountPath: /etc/netbird