#!/bin/sh
set -eu

ensure_secret() {
  name="$1"
  value="$2"
  if docker secret inspect "$name" >/dev/null 2>&1; then
    return 0
  fi
  printf "%s" "$value" | docker secret create "$name" - >/dev/null
}

ensure_secret grafana_admin_password "${GRAFANA_ADMIN_PASSWORD:-admin}"

# Control plane S3 document storage (dev defaults: MinIO in swarm/stacks/control-plane.yml).
ensure_secret control_s3_access_key_id "${CONTROL_S3_ACCESS_KEY_ID:-minioadmin}"
ensure_secret control_s3_secret_access_key "${CONTROL_S3_SECRET_ACCESS_KEY:-minioadmin}"