apiVersion: v1
kind: Secret
metadata:
  name: apcupsd-client-secret
  namespace: apcupsd
  labels:
    app.kubernetes.io/name: apcupsd-client
    app.kubernetes.io/part-of: apcupsd-client
type: Opaque
stringData:
  # Auth (required in production)
  # Generate with: python -c "import secrets; print(secrets.token_urlsafe(32))"
  SESSION_SECRET: ""
  ADMIN_USERNAME: "admin"
  # Generate with: python -c "from passlib.hash import argon2; print(argon2.hash('yourpassword'))"
  ADMIN_PASSWORD_HASH: ""
  SESSION_MAX_AGE_SECONDS: "1209600"
  TRUST_PROXY: "false"
  # Redis
  REDIS_URL: "redis://redis:6379/0"
  # SMTP (optional)
  SMTP_PASSWORD: ""
  # Network
  ALLOW_PRIVATE_IPS: "true"
  # Observability
  LOG_LEVEL: "INFO"
  RATE_LIMIT_ENABLED: "true"
  # Locale
  TZ: "UTC"
  # Legacy migration (unused unless /config is mounted)
  UPS_CONFIG_PATH: "/config/ups.yaml"