{{- if not .Values.secrets.useExternalSecret }}
apiVersion: v1
kind: Secret
metadata:
  name: {{ include "motm-app.fullname" . }}-secrets
  labels:
    {{- include "motm-app.labels" . | nindent 4 }}
type: Opaque
data:
  # Database password
  {{- if .Values.secrets.dbPassword }}
  {{ .Values.secrets.dbPasswordKey }}: {{ .Values.secrets.dbPassword | b64enc | quote }}
  {{- else }}
  {{ .Values.secrets.dbPasswordKey }}: {{ "changeme" | b64enc | quote }}
  {{- end }}
  
  {{- if .Values.s3.enabled }}
  # S3 credentials
  {{- if .Values.secrets.s3AccessKey }}
  {{ .Values.secrets.s3AccessKeyKey }}: {{ .Values.secrets.s3AccessKey | b64enc | quote }}
  {{- else }}
  {{ .Values.secrets.s3AccessKeyKey }}: {{ "changeme" | b64enc | quote }}
  {{- end }}
  
  {{- if .Values.secrets.s3SecretKey }}
  {{ .Values.secrets.s3SecretKeyKey }}: {{ .Values.secrets.s3SecretKey | b64enc | quote }}
  {{- else }}
  {{ .Values.secrets.s3SecretKeyKey }}: {{ "changeme" | b64enc | quote }}
  {{- end }}
  {{- end }}
{{- end }}