From b12731a10080dc22faa3bc2654bd110928f4f1e7 Mon Sep 17 00:00:00 2001
From: klaatu <klaatu@thehellings.com>
Date: Thu, 21 May 2026 06:05:42 +0000
Subject: [PATCH] chore(gitea/anubis): remove anubis-secret.yaml, no manual
 secret needed

---
 manifests/gitea/anubis-secret.yaml | 23 -----------------------
 1 file changed, 23 deletions(-)
 delete mode 100644 manifests/gitea/anubis-secret.yaml

diff --git a/manifests/gitea/anubis-secret.yaml b/manifests/gitea/anubis-secret.yaml
deleted file mode 100644
index dc1eab9..0000000
--- a/manifests/gitea/anubis-secret.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-# Secret for Anubis ED25519 signing key.
-# Create with:
-#   kubectl create secret generic anubis-key \
-#     --namespace gitea \
-#     --from-literal=ED25519_PRIVATE_KEY_HEX=$(openssl rand -hex 32)
-# This file is a placeholder so kustomization knows the secret must exist.
-# The secret is NOT managed here to avoid storing the key in git.
-#
-# If using external-secrets or agenix, replace this comment block with
-# the appropriate ExternalSecret / SealedSecret manifest.
-apiVersion: v1
-kind: Secret
-metadata:
-  name: anubis-key
-  namespace: gitea
-  annotations:
-    # Managed manually — do not overwrite with kustomize apply
-    kustomize.toolkit.fluxcd.io/prune: disabled
-type: Opaque
-# data is intentionally empty; populate via:
-#   kubectl create secret generic anubis-key --namespace gitea \
-#     --from-literal=ED25519_PRIVATE_KEY_HEX=$(openssl rand -hex 32) \
-#     --dry-run=client -o yaml | kubectl apply -f -