From 294542e7186543c0cff1da9c350523871db7ebac Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sun, 14 Dec 2025 22:16:49 -0300
Subject: [PATCH] gitea: reference secret via env; remove secret file

---
 services/gitea/deployment.yaml | 10 ++++++++++
 services/gitea/secret.yaml     | 10 ----------
 2 files changed, 10 insertions(+), 10 deletions(-)
 delete mode 100644 services/gitea/secret.yaml

diff --git a/services/gitea/deployment.yaml b/services/gitea/deployment.yaml
index 4568972..66670a9 100644
--- a/services/gitea/deployment.yaml
+++ b/services/gitea/deployment.yaml
@@ -131,6 +131,16 @@ spec:
               value: "trace"
             - name: GITEA__service__REQUIRE_SIGNIN_VIEW
               value: "false"
+            - name: GITEA__security__SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: gitea-secret
+                  key: SECRET_KEY
+            - name: GITEA__security__INTERNAL_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: gitea-secret
+                  key: INTERNAL_TOKEN
             - name: DB_TYPE
               value: "postgres"
             - name: DB_HOST
diff --git a/services/gitea/secret.yaml b/services/gitea/secret.yaml
deleted file mode 100644
index 11a533d..0000000
--- a/services/gitea/secret.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-# services/gitea/secret.yaml
-apiVersion: v1
-kind: Secret
-metadata:
-  name: gitea-secret
-  namespace: gitea
-type: Opaque
-stringData:
-  SECRET_KEY: "QVOarq1Tb8Lxm2esuB7MoWeK7wkNGpdePFRDyBhj1Rc"
-  INTERNAL_TOKEN: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE3NTQ1NzU3Mzd9.QVOarq1Tb8Lxm2esuB7MoWeK7wkNGpdePFRDyBhj1Rc"