# Drone's secrets

[secrets."drone-ci/rpc_secret"]
type = 'command'
rotate = true
command = 'openssl rand -hex 16'

[secrets."drone-ci/cookie_secret"]
type = 'command'
rotate = true
command = 'openssl rand -hex 16'

[secrets."drone-ci/db_enc_secret"]
type = 'command'
command = 'openssl rand -hex 16'


# Oauth config for gitea

[secrets."drone-ci/oauth_client_secret"]
type = 'user'
description = 'OAuth client secret (for gitea)'

[secrets."drone-ci/oauth_client_id"]
type = 'user'
description = 'OAuth client ID (on Gitea)'


# S3 config for Git LFS storage

[secrets."drone-ci/s3_db_bucket"]
type = 'constant'
value = 'drone-db'

[secrets."drone-ci/s3_sk"]
type = 'user'
description = 'S3 (garage) secret key for Drone'

[secrets."drone-ci/s3_ak"]
type = 'user'
description = 'S3 (garage) access key for Drone'

[secrets."drone-ci/s3_storage_bucket"]
type = 'constant'
value = 'drone-storage'