# Gateway Secrets
# These should be mounted from k8s secrets

# Authentication
# IMPORTANT: Generate a strong random secret for production
# Example: openssl rand -base64 32
auth:
  secret: "change-me-in-production-use-openssl-rand-base64-32"

# LLM Provider API Keys (configure at least one)
llm_providers:
  anthropic_api_key: sk-ant-xxxxx
  openai_api_key: sk-xxxxx
  google_api_key: xxxxx
  openrouter_api_key: sk-or-xxxxx

# Telegram (optional)
telegram:
  bot_token: ""

# Email service (optional)
email:
  service_key: ""

# Push notification service (optional)
push:
  service_key: ""

# Qdrant API key (optional, for hosted Qdrant)
qdrant:
  api_key: ""

# Iceberg S3 credentials
iceberg:
  s3_access_key: minioadmin
  s3_secret_key: minioadmin

# Embedding API key (if using external provider)
embedding:
  api_key: ""