# Copy to secret.yaml (gitignored), set real values, apply once per cluster.
# Carried over from the CasaOS deployment -- NEXTAUTH_SECRET signs existing
# sessions and MEILI_MASTER_KEY unlocks the existing index, so these must be
# the SAME values, not fresh ones.
apiVersion: v1
kind: Secret
metadata:
  name: karakeep
  namespace: karakeep
type: Opaque
stringData:
  meili-master-key: CHANGEME
  nextauth-secret: CHANGEME
  openai-api-key: CHANGEME