# Copy to a gitignored file (e.g. gitops/values/secrets.local.yaml — match *.local.yaml in repo .gitignore).
# Add it as the LAST entry in spec.sources[].helm.valueFiles for the onelab chart so these values win.
#
# Do not commit real values.

registry:
  username: public
  password: "YOUR_REGISTRY_PASSWORD"

postgresql:
  auth:
    password: "YOUR_POSTGRES_PASSWORD"

onelab:
  secrets:
    authTokenKey: "YOUR_AUTH_TOKEN_KEY"
    monitoringToken: "YOUR_MONITORING_TOKEN"
    rabbitToken: "YOUR_RABBIT_TOKEN"
  intercom:
    appid: "YOUR_INTERCOM_APP_ID"
    secret: "YOUR_INTERCOM_SECRET"

# Optional: Grafana admin password is normally set in gitops/values/observability.yaml;
# override there or add a second gitignored value file for the observability source.
# grafana:
#   adminPassword: "YOUR_GRAFANA_PASSWORD"