apiVersion: v1
kind: Secret
metadata:
  name: omnigent-secrets
type: Opaque
stringData:
  DATABASE_URL: "postgresql+psycopg://omnigent:changeme@your-db-host:5432/omnigent"
  # Generate with: openssl rand -hex 32
  OMNIGENT_ACCOUNTS_COOKIE_SECRET: "changeme"
  # --- LLM credentials injected into OpenShell sandboxes ------------------
  # The server reads these from env at provision time and injects them
  # into sandboxes via the sandbox.openshell.env list in config.yaml.
  # Set the ones your harness needs.
  ANTHROPIC_API_KEY: ""
  OPENAI_API_KEY: ""
  GEMINI_API_KEY: ""