# Copy to secret.yaml, fill in real values, and apply. DO NOT commit secret.yaml
# (it is gitignored). Generate SESSION_SECRET with:  openssl rand -base64 32
apiVersion: v1
kind: Secret
metadata:
  name: vncmail-env
  namespace: vncmail
type: Opaque
stringData:
  # Core — connect to Stalwart over JMAP
  JMAP_SERVER_URL: "https://stalwart.sandbox.vnc.de"
  SESSION_SECRET: "REPLACE_ME__openssl_rand_base64_32"
  # Branding (theme defaults to VNClagoon in code; these set name + logo)
  APP_NAME: "VNCmail+"
  APP_SHORT_NAME: "VNCmail+"
  LOGIN_COMPANY_NAME: "VNClagoon"
  LOGIN_LOGO_DARK_URL: "/branding/vncmail-wordmark-on-dark.svg"
  LOGIN_LOGO_LIGHT_URL: "/branding/vncmail-wordmark-on-light.svg"
  APP_LOGO_DARK_URL: "/branding/vncmail-wordmark-on-dark.svg"
  APP_LOGO_LIGHT_URL: "/branding/vncmail-wordmark-on-light.svg"
  LOGIN_LOGO_MAX_HEIGHT: "52"
  # Housekeeping
  BULWARK_UPDATE_CHECK: "off"
  # Data dirs default to /app/data/* (mounted to the PVCs) — no need to set them.