apiVersion: v1
kind: Secret
metadata:
  name: adopt-a-street-secrets
type: Opaque
stringData:
  # JWT Secret - CHANGE THIS IN PRODUCTION!
  JWT_SECRET: "your-super-secret-jwt-key-change-in-production"

  # CouchDB Configuration
  COUCHDB_USER: "admin"  # Change this in production
  COUCHDB_PASSWORD: "admin"  # Change this in production
  COUCHDB_SECRET: "some-random-secret-string"  # Change this in production

  # Cloudinary Configuration (secrets only - non-sensitive values in configmap.yaml)
  CLOUDINARY_API_KEY: "your-cloudinary-api-key"
  CLOUDINARY_API_SECRET: "your-cloudinary-api-secret"

  # Stripe Configuration (optional - currently mocked)
  STRIPE_SECRET_KEY: "your-stripe-secret-key"

  # OpenAI Configuration (optional - for AI features)
  OPENAI_API_KEY: "your-openai-api-key"

---
# IMPORTANT:
# 1. Copy this file to secrets.yaml
# 2. Replace all placeholder values with real secrets
# 3. DO NOT commit secrets.yaml to version control
# 4. Add secrets.yaml to .gitignore
# 5. Generate strong passwords for CouchDB using: openssl rand -base64 32
# 6. Non-sensitive config values (CLOUDINARY_CLOUD_NAME, STRIPE_PUBLISHABLE_KEY, OPENAI_MODEL)
#    are in configmap.yaml
