# productivity Stack — Secrets Reference
# Source: productivity.env
#
# Add SECRET values to Woodpecker at:
#   https://woodpecker.bryanmail.net
#   homelab/compose-files → Settings → Secrets

# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────

# Woodpecker secret name:  productivity_paperless_secret_key
# Used for:               Paperless-ngx secret key for session signing
# Env var in .env:        PAPERLESS_SECRET_KEY
productivity_paperless_secret_key=

# Woodpecker secret name:  productivity_db_password
# Used for:               Paperless-ngx PostgreSQL database password
# Env var in .env:        PAPERLESS_DBPASS
productivity_db_password=

# Woodpecker secret name:  productivity_oidc_providers
# Used for:               Paperless-ngx Authentik SSO config (contains client_id + secret)
#                         NOTE: This is a JSON blob — store the entire value as-is
# Env var in .env:        PAPERLESS_SOCIALACCOUNT_PROVIDERS
productivity_oidc_providers=

# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────

# PAPERLESS_URL                          Public URL
# PAPERLESS_CSRF_TRUSTED_ORIGINS         CSRF allowed origins
# PAPERLESS_TIME_ZONE                    Timezone
# PAPERLESS_OCR_LANGUAGE                 OCR language (eng)
# PAPERLESS_DBNAME                       Database name (paperless)
# PAPERLESS_DBUSER                       Database username (paperless)
# PAPERLESS_APPS                         Django app list
# PAPERLESS_LOGOUT_REDIRECT_URL          Authentik logout URL
# PAPERLESS_SOCIAL_AUTO_SIGNUP           Boolean flag
# PAPERLESS_SOCIALACCOUNT_ALLOW_SIGNUPS  Boolean flag
# PAPERLESS_TRUSTED_PROXIES              Trusted proxy CIDR
# PAPERLESS_USE_X_FORWARD_HOST           Boolean flag
# PAPERLESS_USE_X_FORWARD_PORT           Boolean flag

# ── Woodpecker provision-secrets case entry ───────────────────────────────────
#
#   productivity)
#     create_or_update_secret "productivity_paperless_secret_key" "$PRODUCTIVITY_PAPERLESS_SECRET_KEY"
#     create_or_update_secret "productivity_db_password"          "$PRODUCTIVITY_DB_PASSWORD"
#     create_or_update_secret "productivity_oidc_providers"       "$PRODUCTIVITY_OIDC_PROVIDERS"
#     ;;