apiVersion: v1
kind: Secret
metadata:
  name: appflowy-secrets
  namespace: appflowy
stringData:
  FQDN: "orbit.panic.haus"
  SCHEME: "https"
  APPFLOWY_BASE_URL: "https://orbit.panic.haus"
  APPFLOWY_WEB_URL: "https://orbit.panic.haus"

  # ==== PostgreSQL credentials ====
  GOTRUE_DATABASE_URL: "postgres://appflowy:AjUIkz5lcaEGpCrO9KHYAvaKbLsH2Q0e@postgres-base-rw.postgres.svc.cluster.local:5432/appflowy_db?search_path=auth"
  APPFLOWY_DATABASE_URL: "postgres://appflowy:AjUIkz5lcaEGpCrO9KHYAvaKbLsH2Q0e@postgres-base-rw.postgres.svc.cluster.local:5432/appflowy_db"

  # ==== GoTrue (Auth) keys ====
  GOTRUE_JWT_SECRET: "5IqQzMmpRPoeParMsgoWIphrCYdhFhxz9NSyEQYlwGyTrRSsjInyMSaM44ZCH"
  GOTRUE_ADMIN_PASSWORD: "KaTPKUXiDUVIcUYWjqSy5SFdqrIl5csS"

  # ==== Minio (S3) ====
  APPFLOWY_S3_MINIO_URL: "https://s3.minio.panic.haus"
  MINIO_HOST: "s3.minio.panic.haus"
  MINIO_PORT: "443"
  AWS_ACCESS_KEY: "rjtPFRp52DgmWb4kdsyiFKjtBMxYSaow"          # must match your Minio secret
  AWS_SECRET_KEY: "kabSK8RXcONjO8I7GNfJ03WMueJ7fk6z"          # must match your Minio secret
  APPFLOWY_S3_BUCKET: "appflowy"                # your bucket name
  APPFLOWY_S3_USE_MINIO: "true"
  AWS_REGION: "cluster-panic-haus"
  # If you use AWS S3 instead of Minio, set APPFLOWY_S3_CREATE_BUCKET / AWS_REGION here.

  # ==== GoTrue SMTP (optional) ====
  SMTP_HOST: "mail.mind-overflow.net"
  SMTP_PORT: "465"
  SMTP_USER: "cloud@mind-overflow.net"
  SMTP_PASS: "PcYchuLLUyfT2gvY4Tx7wQ575Tnqjx84zVNoP6Mb"
  SMTP_ADMIN_EMAIL: "hello@beatrice.wtf"

  # ==== AppFlowy Mailer (Cloud) ====
  SMTP_EMAIL: "cloud@mind-overflow.net"
  SMTP_TLS_KIND: "wrapper"   # "none" "wrapper" "required" "opportunistic"

  # ==== Additional secrets for AppFlowy AI (if used) ====
  AI_OPENAI_API_KEY: ""

  # (Optional) any other secrets you need can go here.