# =============================================================================
# TFM aInventory - Secrets Configuration Template (v1.12.0)
# =============================================================================
# Purpose: Sensitive configuration (API keys, passwords, secret keys).
# Security: 'config/secrets.yaml' is ignored by Git. Do NOT commit actual secrets.
# Setup: Copy this file to 'config/secrets.yaml' and fill in actual values.
# =============================================================================

# --- JWT Secrets ---
# Secret key used for signing JSON Web Tokens.
# Generate a strong random key for production use:
#   python3 -c "import secrets; print(secrets.token_urlsafe(64))"
# Environment override: BACKEND_AUTH_JWT_SECRET_KEY or JWT_SECRET_KEY
JWT_SECRET_KEY: "CHANGE_ME_IN_PRODUCTION_MIN_32_CHARS"

# --- AI API Keys ---
# Google Gemini API Key (Required for AI image processing)
# Get one at: https://aistudio.google.com/
# Environment override: BACKEND_AI_GEMINI_API_KEY or GEMINI_API_KEY
GEMINI_API_KEY: "your-gemini-api-key"

# Anthropic Claude API Key (Required for fallback/enhanced processing)
# Get one at: https://console.anthropic.com/
# Environment override: BACKEND_AI_CLAUDE_API_KEY or CLAUDE_API_KEY
CLAUDE_API_KEY: "your-claude-api-key"

# --- External Services ---
# Database password (if using an external DB instead of SQLite)
# Environment override: BACKEND_DATABASE_PASSWORD
DATABASE_PASSWORD: ""

# LDAP password for the service account
# Environment override: BACKEND_AUTH_LDAP_PASSWORD
LDAP_PASSWORD: ""