From a15508bf14f9619b9f2b483180672e02b4d4bf68 Mon Sep 17 00:00:00 2001
From: Shahab Dogar <shahab@dogar.dev>
Date: Tue, 21 Apr 2026 14:12:58 +0500
Subject: [PATCH] fix: Backups | add cloudflare token to longhorn-system

---
 utility-services/index.ts | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/utility-services/index.ts b/utility-services/index.ts
index 3728436..7c744f2 100644
--- a/utility-services/index.ts
+++ b/utility-services/index.ts
@@ -8,7 +8,7 @@ import { GiteaRunner, GiteaServer } from "./gitea";
 import { AuthentikServer } from "./authentik";
 import { PostgresCluster } from "./postgres";
 import { DynamicDNS } from "./dynamic-dns";
-import { PublicIngressRoute } from "../utils";
+import { OnePasswordSecret, PublicIngressRoute } from "../utils";
 
 export class UtilityServices extends TerraformStack {
   constructor(scope: Construct, id: string) {
@@ -77,6 +77,13 @@ export class UtilityServices extends TerraformStack {
       ],
     });
 
+    new OnePasswordSecret(this, "backups-secret", {
+      namespace: "longhorn-system",
+      provider: kubernetes,
+      name: "cloudflare-token",
+      itemPath: "vaults/Lab/items/cloudflare",
+    });
+
     const postgres = new PostgresCluster(this, "postgres-cluster", {
       certManagerApiVersion: "cert-manager.io/v1",
       name: "postgres-cluster",