# Shorashim Secrets — template only
# NEVER commit actual secret values to git.
# Apply with: kubectl apply -f - after filling in values.
#
# The DATABASE_URL connects to Exoscale PostgreSQL (temple-council-db)
# in ch-gva-2 zone. Retrieve credentials from:
#   exo dbaas show temple-council-db --zone ch-gva-2
apiVersion: v1
kind: Secret
metadata:
  name: shorashim-secrets
  namespace: shorashim
type: Opaque
stringData:
  # PostgreSQL connection for L3 Oral Tradition
  # Format: ecto://user:password@host:port/database?sslmode=require
  DATABASE_URL: "REPLACE_WITH_ACTUAL_DATABASE_URL"