From 078976c2f31ec2da054fa4e3a33d85dd287dfe85 Mon Sep 17 00:00:00 2001
From: nicktrn <55853254+nicktrn@users.noreply.github.com>
Date: Wed, 25 Jun 2025 15:40:48 +0100
Subject: [PATCH] improve secrets config example

---
 docs/self-hosting/kubernetes.mdx | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/docs/self-hosting/kubernetes.mdx b/docs/self-hosting/kubernetes.mdx
index 9946fc7ba..c3b5eb673 100644
--- a/docs/self-hosting/kubernetes.mdx
+++ b/docs/self-hosting/kubernetes.mdx
@@ -105,12 +105,23 @@ config:
 Create a `values-custom.yaml` file. For example:
 
 ```yaml
-# Required: Generate new secrets with `openssl rand -hex 16`
+# Generate new secrets with `openssl rand -hex 16`
+# WARNING: You should probably use existingSecret instead of hardcoding here
 secrets:
   sessionSecret: "your-32-char-hex-secret-1"
   magicLinkSecret: "your-32-char-hex-secret-2"
-  encryptionKey: "your-32-char-hex-secret-3"
-  managedWorkerSecret: "your-32-char-hex-secret-4"
+  # ...
+
+# Recommended: Use existing secret - must contain at least the following keys:
+# - SESSION_SECRET
+# - MAGIC_LINK_SECRET
+# - ENCRYPTION_KEY
+# - MANAGED_WORKER_SECRET
+# - OBJECT_STORE_ACCESS_KEY_ID
+# - OBJECT_STORE_SECRET_ACCESS_KEY
+secrets:
+  enabled: false
+  existingSecret: "your-existing-secret"
 
 # Application URLs
 config: