# Non-secret configuration. Every key here exists in apps/api/.env.example with the same
# meaning; nothing is invented for Kubernetes.
apiVersion: v1
kind: ConfigMap
metadata:
  name: impuestos-config
  namespace: impuestos
data:
  NODE_ENV: 'production'
  PORT: '4000'

  # The origin a person types. Cookies are issued for it and links in email point at it.
  APP_PUBLIC_URL: 'https://impuestos.example'
  BETTER_AUTH_URL: 'https://impuestos.example'

  # Postgres connections per pod. Multiply by (api replicas + worker replicas) and keep the
  # total under the server's max_connections.
  DATABASE_POOL_MAX: '10'

  JOBS_POLL_INTERVAL_MS: '2000'
  JOBS_STALE_MINUTES: '10'

  STORAGE_DRIVER: 's3'
  S3_REGION: 'us-east-1'
  S3_BUCKET: 'impuestos-comprobantes'
  S3_FORCE_PATH_STYLE: 'true'
  # Leave empty for AWS; set it for MinIO or another S3 compatible service.
  S3_ENDPOINT: ''

  OCR_MODEL: 'claude-sonnet-4-6'
  DEFAULT_LOCALE: 'es'

  SMTP_PORT: '587'
  SMTP_FROM: 'avisos@impuestos.example'
  # RFC 8292 wants an https: or mailto: URL. Without one, push switches itself off.
  PUSH_VAPID_SUBJECT: 'mailto:soporte@impuestos.example'
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: impuestos-web-config
  namespace: impuestos
data:
  NODE_ENV: 'production'
  # Cluster DNS for the api Service. The browser never sees this address.
  API_INTERNAL_URL: 'http://impuestos-api:4000'
  NEXT_PUBLIC_DEFAULT_LOCALE: 'es'