# kubernetes/secrets.yaml
apiVersion: v1
kind: Secret
metadata:
  name: rallly-secrets
  namespace: default
type: Opaque
stringData:
  # Database Connection String (postgres://user:password@service:port/db_name)
  # IMPORTANT: The username/password here MUST match POSTGRES_USER/POSTGRES_PASSWORD below.
  DATABASE_URL: "postgres://rallly:CHANGE_ME_PASSWORD@postgres:5432/rallly"

  # Random string for session encryption (generate with 'openssl rand -hex 32')
  SECRET_PASSWORD: "CHANGE_ME_TO_A_LONG_RANDOM_STRING"

  # The email of the first admin user
  INITIAL_ADMIN_EMAIL: "admin@example.com"

  # Database Credentials (used by the postgres StatefulSet)
  POSTGRES_USER: "rallly"
  POSTGRES_PASSWORD: "CHANGE_ME_PASSWORD"