---
credentials:
  database_password:
    description: Postgres password used by the OpenTalk controller for its dedicated database.
    algorithm: alphanumeric
    validation:
      min_length: 24
  livekit_api_secret:
    description: Shared secret between OpenTalk controller and the LiveKit media server.
    algorithm: alphanumeric
    validation:
      min_length: 32
  controller_oidc_client_secret:
    description: Client secret for the dedicated confidential Keycloak client (`opentalk-controller`) the controller uses to introspect access tokens.
    algorithm: alphanumeric
    validation:
      min_length: 32
  recorder_api_secret:
    description: API key secret the controller signs its requests to the recorder with (`roomserver.modules.recording.api_key`, `http.api_keys` of the
      recorder).
    algorithm: alphanumeric
    validation:
      min_length: 32
  service_api_secret:
    description: API key secret for the controller's internal service APIs (`http.service_api_keys`), mandatory since controller v0.34 for the roomserver
      integration.
    algorithm: alphanumeric
    validation:
      min_length: 32