{{- if not .Values.secrets.existingSecret }}
---
apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: {{ include "hrbox.secretName" . | quote }}
  labels:
    {{- include "hrbox.labels" (dict "ctx" . "name" "app") | nindent 4 }}
stringData:
  cookie-validation-key: {{ .Values.secrets.cookieValidationKey | quote }}
  encryption-key: {{ .Values.secrets.encryptionKey | quote }}
  services-internal-secret: {{ .Values.secrets.servicesInternalSecret | quote }}
  postgres-password: {{ .Values.app.postgres.password | quote }}
  s3-key: {{ .Values.app.s3.key | quote }}
  s3-secret: {{ .Values.app.s3.secret | quote }}
  smtp-password: {{ .Values.app.smtp.password | quote }}
  hub-token: {{ .Values.app.hub.token | quote }}
  chatbox-wrapping-key: {{ .Values.app.chatbox.wrappingKey | quote }}
  livekit-api-secret: {{ .Values.app.livekit.apiSecret | quote }}
  yandex-client-password: {{ .Values.app.yandex.clientPassword | quote }}
  yandex-ai-api-key: {{ .Values.app.ai.yandex.apiKey | quote }}
  google-client-secret: {{ .Values.app.integrations.google.clientSecret | quote }}
  slack-client-secret: {{ .Values.app.slack.clientSecret | quote }}
  slack-verification-token: {{ .Values.app.slack.verificationToken | quote }}
{{- end }}