feat(apps): move user/pass/secrets/keys from env to secret (#1501)

* feat(apps): move user/pass/secrets/keys from `env` to `secret`

* uptimerobot-prometheus

* podgrab

* grafana

* nextcloud

* openldap, also fix some variable types

* healthchecks

* onlyoffice

* transmission

* fix variable type (stash)

* handbrake (also fix some variable types)

* jd2 (also fix some var  values

* whoops

* try this

* bump major

* fix calibre var type

* fix var types on 2 apps

* add placeholders on questions and set `private: true` on passwords/tokens/secrets

charts/stable/openldap/values.yaml

@@ -50,29 +50,30 @@ service:
         port: 636
         targetPort: 636
 
+secret:
+  LDAP_ADMIN_PASSWORD: "ldapadmin"
+  LDAP_CONFIG_PASSWORD: "changeme"
+  LDAP_READONLY_USER_USERNAME: "readonly"
+  LDAP_READONLY_USER_PASSWORD: "readonly"
 # Default configuration for openldap as environment variables. These get injected directly in the container.
 # Use the env variables from https://github.com/osixia/docker-openldap#beginner-guide
 env:
-  LDAP_LOG_LEVEL: "256"
+  LDAP_LOG_LEVEL: 256
   LDAP_ORGANISATION: "Example Inc."
   LDAP_DOMAIN: "example.org"
-  LDAP_READONLY_USER: "false"
-  LDAP_READONLY_USER_USERNAME: "readonly"
-  LDAP_READONLY_USER_PASSWORD: "readonly"
-  LDAP_RFC2307BIS_SCHEMA: "false"
+  LDAP_READONLY_USER: false
+  LDAP_RFC2307BIS_SCHEMA: false
   LDAP_BACKEND: "mdb"
-  LDAP_TLS: "true"
-  LDAP_TLS_ENFORCE: "false"
+  LDAP_TLS: true
+  LDAP_TLS_ENFORCE: false
   LDAP_TLS_VERIFY_CLIENT: "never"
   LDAP_TLS_PROTOCOL_MIN: "3.0"
   LDAP_TLS_CIPHER_SUITE: "NORMAL"
   LDAP_TLS_REQCERT: "never"
-  CONTAINER_LOG_LEVEL: "4"
-  KEEP_EXISTING_CONFIG: "false"
-  LDAP_REMOVE_CONFIG_AFTER_SETUP: "true"
+  CONTAINER_LOG_LEVEL: 4
+  KEEP_EXISTING_CONFIG: false
+  LDAP_REMOVE_CONFIG_AFTER_SETUP: true
   LDAP_SSL_HELPER_PREFIX: "ldap"
-  LDAP_ADMIN_PASSWORD: "ldapadmin"
-  LDAP_CONFIG_PASSWORD: "changeme"
 
 replication:
   enabled: false