# Optional secrets overlay, merged over config.yaml via --secrets. Fields set
# here override their ${ENV} base value; omit the rest. Uncomment what you use.

# database:
#   dsn: "user:pass@tcp(host:3306)/alertstore"

webhook:
  alertmanager_tokens:
    - name: primary
      secret: replace-me
    # A second token exists only during rotation; drop it once senders have cut
    # over and alertstore_webhook_authorized_total{token="legacy"} goes flat.
    - name: legacy
      secret: replace-me-too

# im:
#   app_secret: replace-me

# clinic:
#   token: replace-me

# devops:
#   api_token: replace-me

# oncall:
#   api_key: replace-me

# jira:
#   token: replace-me