# Example secrets file for DexOrder user container
# Mount this at /app/config/secrets.yaml in k8s
# This file should be created from k8s secrets

# Iceberg catalog credentials
iceberg:
  s3:
    endpoint: "http://minio:9000"
    access_key_id: "minioadmin"
    secret_access_key: "minioadmin"
    region: "us-east-1"

  catalog:
    uri: "http://iceberg-rest:8181"
    warehouse: "s3://warehouse/"

# API keys for external services (if needed)
api_keys:
  telegram_bot_token: ""

# Internal auth (for mode A - platform harness)
auth:
  mode: "mtls"  # or "platform_token" or "api_key"
  # API key hash if using api_key mode
  api_key_hash: ""