first commit

k8s/n8n/miniflux-token-secret.example.yaml

@@ -0,0 +1,20 @@
+# Copy to miniflux-token-secret.yaml, fill in the real token, and apply with:
+#   kubectl apply -f miniflux-token-secret.yaml
+# Never commit the filled-in file to git.
+#
+# Generate the token in the Miniflux UI under Settings -> API Keys (no
+# public REST endpoint creates one). Kept here as the source of truth /
+# backup; the digest workflow itself should use an n8n "Header Auth"
+# credential (header name X-Auth-Token) created in the n8n UI from these
+# same values, not a raw env var — n8n blocks $env access from workflow
+# expressions by default (N8N_BLOCK_ENV_ACCESS_IN_NODE), so this Secret is
+# not wired into the n8n Deployment's envFrom.
+apiVersion: v1
+kind: Secret
+metadata:
+  name: miniflux-api-token
+  namespace: watch
+type: Opaque
+stringData:
+  MINIFLUX_URL: https://miniflux.sttlab.pc/v1/
+  MINIFLUX_API_TOKEN: changeme