apiVersion: v1
kind: Secret
metadata:
  name: n8n-secret
  namespace: n8n
  annotations:
    argocd.argoproj.io/sync-options: "Prune=false"
    # data managed manually — do NOT store the real value here
    # create/update with: kubectl create secret generic n8n-secret \
    #   --from-literal=encryption-key='<value-from-vaultwarden>' \
    #   -n n8n --dry-run=client -o yaml | kubectl apply -f -
type: Opaque