# Copy to secret.yaml, fill in real values, and apply. DO NOT commit secret.yaml
# (it is gitignored). Generate SESSION_SECRET with:  openssl rand -base64 32
apiVersion: v1
kind: Secret
metadata:
  name: vncmail-env
  namespace: vncmail
type: Opaque
stringData:
  # Core — connect to Stalwart over JMAP
  JMAP_SERVER_URL: "https://stalwart.sandbox.vnc.de"
  SESSION_SECRET: "REPLACE_ME__openssl_rand_base64_32"
  # Branding
  APP_NAME: "VNCmail+"
  APP_SHORT_NAME: "VNCmail+"
  LOGIN_COMPANY_NAME: "VNC"
  # Housekeeping
  BULWARK_UPDATE_CHECK: "off"
  # Data dirs default to /app/data/* (mounted to the PVCs) — no need to set them.