#!/bin/bash

USERS=(RATDAD)
SECRETS=(SESSION_SECRET STORAGE_ENCRYPTION JWT_SECRET OIDC_HMAC_SECRET)
SECRET_DIR=$PWD/secrets

[ ! -d "$SECRET_DIR" ] && mkdir -p "$SECRET_DIR"

# Generate secrets
for filename in "${SECRETS[@]}"; do
    openssl rand -hex 64 > "$SECRET_DIR"/"$filename"
done

# Generate admin passwords
for filename in "${USERS[@]}"; do
    openssl rand -hex 12 > "$SECRET_DIR"/"$filename"
done