---
# Secret for Forgejo authentication
# IMPORTANT: This file should contain a sealed secret or be created manually
# Never commit actual credentials to Git!

apiVersion: v1
kind: Secret
metadata:
  name: forgejo-credentials
  namespace: flux-system
type: Opaque
stringData:
  # Create this secret manually with:
  # kubectl create secret generic forgejo-credentials \
  #   --namespace=flux-system \
  #   --from-literal=username=git \
  #   --from-literal=password=YOUR_FORGEJO_TOKEN

  # For this example, we use a placeholder
  # REPLACE THIS IN PRODUCTION with sealed-secrets or external-secrets
  username: git
  password: REPLACE_WITH_FORGEJO_TOKEN