# Copy to secrets.env (kept out of git) and fill in. Generate each with:
#   openssl rand -base64 32
# Or delete the secretGenerator in kustomization.yaml and create the Secret
# `bulwark-secrets` with these three keys some other way (External Secrets,
# Sealed Secrets, your CI).

# Encrypts sessions, synced settings and plugin credentials. The same on every
# replica; changing it signs everyone out.
SESSION_SECRET=
# First admin password; hashed into the store on the first start.
ADMIN_PASSWORD=
# Password of the Valkey store.
VALKEY_PASSWORD=