From bf6457753b6b5d23979f8d64d3a8e1d01a8d6bdd Mon Sep 17 00:00:00 2001
From: Steve Korshakov <steve@korshakov.com>
Date: Sat, 12 Jul 2025 18:23:47 -0700
Subject: [PATCH] ref: use anoter master secret

---
 deploy/handy.yaml  | 2 ++
 sources/app/api.ts | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/deploy/handy.yaml b/deploy/handy.yaml
index f671a9f..43b67cc 100644
--- a/deploy/handy.yaml
+++ b/deploy/handy.yaml
@@ -54,6 +54,8 @@ spec:
   dataFrom:
     - extract:
         key: /handy-db
+    - extract:
+        key: /handy-master
 ---
 apiVersion: v1
 kind: Service
diff --git a/sources/app/api.ts b/sources/app/api.ts
index 4bc0212..570f5a7 100644
--- a/sources/app/api.ts
+++ b/sources/app/api.ts
@@ -24,7 +24,7 @@ export async function startApi() {
     log('Starting API...');
     const tokenGenerator = await privacyKit.createPersistentTokenGenerator({
         service: 'handy',
-        seed: process.env.SEED || 'handy'
+        seed: process.env.HANDY_MASTER_SECRET!
     });
     const tokenVerifier = await privacyKit.createPersistentTokenVerifier({
         service: 'handy',