---
# CMS Application Configuration Secret (Production)
# This Secret stores appsettings.Production.json externally in K8s
# so configuration persists independently of Docker image rebuilds.
#
# To edit config without redeploying:
#   kubectl edit secret cms-appsettings
#   kubectl rollout restart deployment/cms
#
apiVersion: v1
kind: Secret
metadata:
  name: cms-appsettings
  namespace: default
  labels:
    app: cms
    environment: production
type: Opaque
stringData:
  appsettings.Production.json: |
    {
      "PaymentProvider": "zarinpal",
      "ZarinPal": {
        "MerchantId": "4225d555-5fa9-4df0-9b61-1ce152cbbba8",
        "UseSandbox": false
      },
      "CmsBaseUrl": "https://cms.kbs2.ir",
      "FrontOfficeBaseUrl": "https://kbs2.ir",
      "JwtSecurityKey": "TvlZVx5TJaHs8e9HgUdGzhGP2CIidoI444nAj+8+g7c=",
      "JwtIssuer": "https://localhost",
      "JwtAudience": "https://localhost",
      "JwtExpiryInDays": 5,
      "ConnectionStrings": {
        "DefaultConnection": "Server=mssql-svc;Database=KBS;User Id=sa;Password=YourStrong@Passw0rd;TrustServerCertificate=True;",
        "providerName": "System.Data.SqlClient"
      },
      "Otp": {
        "Secret": "K2w8k1h1mH2Qz1kqWk0c8kQ2Pq8q9H1eE2nqN1qQ8x7M="
      },
      "Monitoring": {
        "SentryEnabled": false,
        "SentryDsn": "",
        "SlackEnabled": false,
        "SlackWebhookUrl": "",
        "EmailAlertsEnabled": false,
        "AdminEmails": [
          "admin@example.com"
        ],
        "SmsNotificationsEnabled": false,
        "SmsApiKey": "",
        "SmsGatewayUrl": ""
      },
      "Email": {
        "Enabled": true,
        "SmtpHost": "smtp.gmail.com",
        "SmtpPort": 587,
        "SmtpUsername": "your-email@gmail.com",
        "SmtpPassword": "your-app-password",
        "FromEmail": "noreply@foursat.com",
        "FromName": "FourSat CMS",
        "EnableSsl": true
      },
      "Sms": {
        "Enabled": true,
        "Provider": "Kavenegar",
        "KavenegarApiKey": "43676A4E786A6C50452F2F6252507939346A5145764B33566B456454374E657A614468706658656D6534593D",
        "Sender": "1000001110100"
      },
      "DayaPayment": {
        "BaseUrl": "https://api.daya.ir",
        "ApiKey": "YOUR_DAYA_API_KEY"
      },
      "DayaApi": {
        "UseMock": false,
        "BaseAddress": "https://Dayadiamond.ir",
        "MerchantPermissionKey": "56146364$04sXjethI5WxhItR1Q9xnmFdJzl2BB8Bclsq8dAy7YVSZp3vtt-wP7ivrcCvmKLq",
        "CacheDurationMinutes": 20
      },
      "Chatika": {
        "Enabled": true,
        "BaseUrl": "https://api.chatika.ir",
        "ApiKey": "tIukvL8dnV4cB3yVWcCD9Xyfbj8rBxm5wPt2mLyJCgTsBBoMTWjt6mFEqQwpw-er"
      },
      "BackgroundJobs": {
        "WeeklyCommissionCalculation": {
          "Enabled": false,
          "CronExpression": "5 0 * * 0"
        }
      },
      "SeedWorkers": {
        "MagicWalletCycleSeed": {
          "Enabled": true
        }
      },
      "AllowedHosts": "*",
      "Kestrel": {
        "EndpointDefaults": {
          "Protocols": "Http2"
        }
      },
      "Authentication": {
        "Authority": "https://ids.domain.com/",
        "Audience": "domain_api"
      },
      "Seq": {
        "ServerUrl": "http://seq-svc:5341",
        "ApiKey": "oxpvpUzU1pZxMS4s3Fqq"
      },
      "Logging": {
        "LogLevel": {
          "Default": "Warning",
          "Microsoft.AspNetCore": "Warning"
        }
      }
    }