---
credentials:
  initial_admin_password:
    description: "Password seeded for the Frappe `Administrator` user on first deploy via `bench new-site --admin-password`. Local break-glass credential when OIDC
      is unavailable."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{16,}$"
    length: 32
  api_key_secret:
    description: "Long-lived Frappe API key:secret pair used by `tasks/` for post-bootstrap configuration (Social Login Key creation, role assignments). Stored as
      a single alphanumeric blob; the role splits it at the colon at use time."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 64