# Template only -- the real values live in vaultwarden-sealedsecret.yaml.
# ADMIN_TOKEN is an Argon2id PHC string (vaultwarden hash --preset owasp),
# NOT a plaintext token. Generate a replacement with:
#   docker run --rm python:3.12-alpine sh -c \
#     'pip install -q argon2-cffi && python -c "..."'
apiVersion: v1
kind: Secret
metadata:
  name: vaultwarden-secret
  namespace: vaultwarden
type: Opaque
stringData:
  ADMIN_TOKEN: '$argon2id$v=19$m=19456,t=2,p=1$REPLACE$REPLACE'