# IMPORTANT: This is a template file
# Before deploying, update all secret values with real credentials
# Never commit real secrets to version control

apiVersion: v1
kind: Secret
metadata:
  name: vapora-secrets
  namespace: vapora
type: Opaque
stringData:
  # JWT secret for authentication (generate with: openssl rand -base64 32)
  jwt-secret: "CHANGE-ME-generate-random-secret"

  # LLM API Keys
  anthropic-api-key: "sk-ant-CHANGE-ME"
  openai-api-key: "sk-CHANGE-ME"
  gemini-api-key: "CHANGE-ME"

  # Database credentials
  surrealdb-user: "root"
  surrealdb-pass: "CHANGE-ME-strong-password"

  # Optional: OAuth2 credentials
  # github-client-id: ""
  # github-client-secret: ""