# auth Stack — Secrets Reference
# Source: auth.env
#
# Add SECRET values to Woodpecker at:
#   https://woodpecker.bryanmail.net
#   homelab/compose-files → Settings → Secrets

# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────

# Woodpecker secret name:  auth_pg_password
# Used for:               Authentik PostgreSQL password (PGadmin user)
# Env var in .env:        AUTHENTIK_POSTGRESQL__PASSWORD
auth_pg_password=

# Woodpecker secret name:  auth_secret_key
# Used for:               Authentik secret key for session signing and crypto
# Env var in .env:        AUTHENTIK_SECRET_KEY
auth_secret_key=

# Woodpecker secret name:  auth_pg_password2
# Used for:               Authentik app-level PostgreSQL password (Authentik user)
# Env var in .env:        AUTHENTIK_POSTGRESQL__PASSWORD2
auth_pg_password2=

# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────

# AUTHENTIK_POSTGRESQL__HOST      PostgreSQL hostname (postgresql)
# AUTHENTIK_POSTGRESQL__USER      PostgreSQL superuser (PGadmin)
# AUTHENTIK_POSTGRESQL__NAME      Database name (authentik)
# AUTHENTIK_POSTGRESQL__USER2     Authentik app user (Authentik)

# ── Woodpecker provision-secrets case entry ───────────────────────────────────
#
#   auth)
#     create_or_update_secret "auth_pg_password"  "$AUTH_PG_PASSWORD"
#     create_or_update_secret "auth_secret_key"   "$AUTH_SECRET_KEY"
#     create_or_update_secret "auth_pg_password2" "$AUTH_PG_PASSWORD2"
#     ;;