From 48924262aa3e29fd4982215dc2bce9f661ee846b Mon Sep 17 00:00:00 2001
From: ivan <ivan@MacBook-Air-som-tillhor-ivan.local>
Date: Mon, 21 Sep 2026 17:31:50 +0500
Subject: [PATCH] vad: contracts DB_URL from the Vault postgres secret
 (external database)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 apps/contracts/vad/backend.yaml       | 16 ++++++++++++++++
 apps/contracts/vad/kustomization.yaml |  5 +++++
 2 files changed, 21 insertions(+)
 create mode 100644 apps/contracts/vad/backend.yaml

diff --git a/apps/contracts/vad/backend.yaml b/apps/contracts/vad/backend.yaml
new file mode 100644
index 0000000..95076cc
--- /dev/null
+++ b/apps/contracts/vad/backend.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: contracts
+  namespace: contracts
+spec:
+  values:
+    services:
+      contracts:
+        podAnnotations:
+          _default:
+            vault.hashicorp.com/agent-inject-template-contracts-db: |-
+              {{- with secret "secrets/data/apps/contracts/postgres" -}}
+              DB_URL=postgresql://{{ index .Data.data "username" }}:{{ index .Data.data "password" }}@{{ index .Data.data "host" }}:{{ index .Data.data "port" }}/{{ index .Data.data "database" }}?sslmode=disable
+              {{- end -}}
diff --git a/apps/contracts/vad/kustomization.yaml b/apps/contracts/vad/kustomization.yaml
index 27bb5cb..28a6ccb 100644
--- a/apps/contracts/vad/kustomization.yaml
+++ b/apps/contracts/vad/kustomization.yaml
@@ -2,3 +2,8 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ../base
+patches:
+  - path: backend.yaml
+    target:
+      kind: HelmRelease
+      name: contracts