# Expects secrets at specific paths in Vault KV v2 (mount point 'secret/')

data "vault_generic_secret" "proxmox" {
  count = var.use_vault ? 1 : 0
  path  = "secret/infrastructure/proxmox"
}

data "vault_generic_secret" "opnsense" {
  count = var.use_vault ? 1 : 0
  path  = "secret/infrastructure/opnsense"
}

data "vault_generic_secret" "vm_creds" {
  count = var.use_vault ? 1 : 0
  path  = "secret/infrastructure/vm-credentials"
}