# These secrets are synced into Kubernetes via External Secrets Operator.
# Secret path: dev/stripo-v2-<service>/<SECRET_NAME>
# The "v2" prefix avoids conflicts with existing Stripo V1 secrets in dev/stripo.

module "argocd_repo_secret" {
  source = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"

  environment        = var.environment
  service_name       = "${var.service_name}-argocd"
  secret_name        = "STRIPO_ARGO_DEPLOYMENT_KEY"
  application_family = var.application_family
}

module "secrets_v2_nats" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_nats)

  environment                    = var.environment
  service_name                   = "${var.service_name}-nats"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_redis" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_redis)

  environment                    = var.environment
  service_name                   = "${var.service_name}-redis"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_tidb" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_tidb)

  environment                    = var.environment
  service_name                   = "${var.service_name}-tidb"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_jwt" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_jwt)

  environment                    = var.environment
  service_name                   = "${var.service_name}-jwt"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_security_inter_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_security_inter_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-security-inter-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_coediting_core_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_coediting_core_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-coediting-core-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_ai_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_ai_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-ai-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_security_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_security_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-security-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_api_gateway" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_api_gateway)

  environment                    = var.environment
  service_name                   = "${var.service_name}-api-gateway"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_timer_api" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_timer_api)

  environment                    = var.environment
  service_name                   = "${var.service_name}-timer-api"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_documents_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_documents_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-documents-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_custom_blocks_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_custom_blocks_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-custom-blocks-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_statistics_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_statistics_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-statistics-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_details_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_details_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-details-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_html_gen_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_html_gen_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-html-gen-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_proxy_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_proxy_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-proxy-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_image_bank_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_image_bank_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-image-bank-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_countdowntimer" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_countdowntimer)

  environment                    = var.environment
  service_name                   = "${var.service_name}-countdowntimer"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_amp_validator_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_amp_validator_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-amp-validator-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_html_cleaner_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_html_cleaner_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-html-cleaner-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}

module "secrets_v2_drafts_service" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.5.1"
  for_each = toset(var.secrets_manager_v2_drafts_service)

  environment                    = var.environment
  service_name                   = "${var.service_name}-drafts-service"
  secret_name                    = each.value
  application_family             = var.application_family
  secret_recovery_window_in_days = 7
}