# Copy to secret.yaml, fill in real values, and apply. DO NOT commit secret.yaml
# (it is gitignored). Generate SESSION_SECRET with:  openssl rand -base64 32
#
# JMAP_SERVER_URL is a PLACEHOLDER — there is no production Stalwart instance
# yet. This overlay cannot go live (Phase D) until one exists and this value
# points at it for real.
apiVersion: v1
kind: Secret
metadata:
  name: vncmail-env
  namespace: vncmail-prod
type: Opaque
stringData:
  # Core — connect to Stalwart over JMAP
  JMAP_SERVER_URL: "https://REPLACE-ME-prod-stalwart-not-yet-deployed.invalid"
  SESSION_SECRET: "REPLACE_ME__openssl_rand_base64_32"
  # Branding (theme defaults to VNClagoon in code; these set name + logo)
  APP_NAME: "VNCmail+"
  APP_SHORT_NAME: "VNCmail+"
  LOGIN_COMPANY_NAME: "VNClagoon"
  LOGIN_LOGO_DARK_URL: "/branding/vncmail-wordmark-on-dark.svg"
  LOGIN_LOGO_LIGHT_URL: "/branding/vncmail-wordmark-on-light.svg"
  APP_LOGO_DARK_URL: "/branding/vncmail-wordmark-on-dark.svg"
  APP_LOGO_LIGHT_URL: "/branding/vncmail-wordmark-on-light.svg"
  LOGIN_LOGO_MAX_HEIGHT: "52"
  # Housekeeping
  BULWARK_UPDATE_CHECK: "off"
  # Data dirs default to /app/data/* (mounted to the PVCs) — no need to set them.