# === SECRETS ===
apiVersion: v1
kind: Secret
metadata:
  name: postgres-secret
  namespace: veza-production
type: Opaque
data:
  url: cG9zdGdyZXNxbDovL3ZlemE6c2VjdXJlX3Bhc3NAcG9zdGdyZXM6NTQzMi92ZXphX3Byb2Q=  # postgresql://veza:secure_pass@postgres:5432/veza_prod

---
apiVersion: v1
kind: Secret
metadata:
  name: redis-secret
  namespace: veza-production
type: Opaque
data:
  url: cmVkaXM6Ly9yZWRpczoxMjM0NUByZWRpczA2Mzc5  # redis://redis@redis:6379

---
apiVersion: v1
kind: Secret
metadata:
  name: jwt-secret
  namespace: veza-production
type: Opaque
data:
  secret: eW91cl9wcm9kdWN0aW9uX2p3dF9zZWNyZXRfaGVyZQ==  # your_production_jwt_secret_here

---
apiVersion: v1
kind: Secret
metadata:
  name: tls-secret
  namespace: veza-production
type: kubernetes.io/tls
data:
  tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0t  # Base64 encoded cert
  tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0t  # Base64 encoded key