# Copy to miniflux-token-secret.yaml, fill in the real token, and apply with:
#   kubectl apply -f miniflux-token-secret.yaml
# Never commit the filled-in file to git.
#
# Generate the token in the Miniflux UI under Settings -> API Keys (no
# public REST endpoint creates one). Kept here as the source of truth /
# backup; the digest workflow itself should use an n8n "Header Auth"
# credential (header name X-Auth-Token) created in the n8n UI from these
# same values, not a raw env var — n8n blocks $env access from workflow
# expressions by default (N8N_BLOCK_ENV_ACCESS_IN_NODE), so this Secret is
# not wired into the n8n Deployment's envFrom.
apiVersion: v1
kind: Secret
metadata:
  name: miniflux-api-token
  namespace: watch
type: Opaque
stringData:
  MINIFLUX_URL: https://miniflux.sttlab.pc/v1/
  MINIFLUX_API_TOKEN: changeme