---
# EXAMPLE — Replace with real values, then encrypt with:
#   ansible-vault encrypt inventory/host_vars/example-instance/vault.yml
#
# Or generate all secrets automatically:
#   ./scripts/bootstrap-vault.sh example-instance

# --- Database ---
vault_cml_v2_postgres_password: "GENERATE_ME"

# --- Redis ---
vault_cml_redis_password: "GENERATE_ME"

# --- JWT & Encryption ---
vault_cml_jwt_access_secret: "GENERATE_ME"
vault_cml_jwt_refresh_secret: "GENERATE_ME"
vault_cml_encryption_key: "GENERATE_ME"

# --- Admin ---
vault_cml_initial_admin_email: "admin@example.org"
vault_cml_initial_admin_password: "GENERATE_ME"

# --- Listmonk ---
vault_cml_listmonk_db_password: "GENERATE_ME"
vault_cml_listmonk_web_admin_password: "GENERATE_ME"
vault_cml_listmonk_api_token: "GENERATE_ME"

# --- NocoDB ---
vault_cml_nocodb_admin_password: "GENERATE_ME"

# --- Gitea ---
vault_cml_gitea_db_passwd: "GENERATE_ME"
vault_cml_gitea_db_root_password: "GENERATE_ME"

# --- n8n ---
vault_cml_n8n_encryption_key: "GENERATE_ME"
vault_cml_n8n_user_password: "GENERATE_ME"

# --- Monitoring ---
vault_cml_grafana_admin_password: "GENERATE_ME"
vault_cml_gotify_admin_password: "GENERATE_ME"

# --- Vaultwarden ---
vault_cml_vaultwarden_admin_token: "GENERATE_ME"

# --- Rocket.Chat ---
vault_cml_rocketchat_admin_password: "GENERATE_ME"

# --- Gancio ---
vault_cml_gancio_admin_password: "GENERATE_ME"

# --- SMTP ---
vault_cml_smtp_pass: ""

# --- Pangolin ---
vault_cml_pangolin_api_key: ""
vault_cml_pangolin_newt_id: ""
vault_cml_pangolin_newt_secret: ""
vault_cml_pangolin_site_id: ""
vault_cml_pangolin_endpoint: ""

# --- Bunker Ops ---
vault_bunker_ops_remote_write_token: ""