From d8ab713c7ba3bf26bd6c342784abf1bb71dfe7da Mon Sep 17 00:00:00 2001
From: Jorge Manrubia <jorge@hey.com>
Date: Wed, 26 Nov 2025 17:10:02 +0100
Subject: [PATCH] Add missing kamal secrets

---
 saas/config/deploy.beta.yml       | 20 ++++++++++++++++++++
 saas/config/deploy.production.yml |  6 +++++-
 saas/config/deploy.staging.yml    |  6 +++++-
 3 files changed, 30 insertions(+), 2 deletions(-)

diff --git a/saas/config/deploy.beta.yml b/saas/config/deploy.beta.yml
index f1db401c7..2f5c1a4ed 100644
--- a/saas/config/deploy.beta.yml
+++ b/saas/config/deploy.beta.yml
@@ -20,6 +20,26 @@ ssh:
 env:
   clear:
     RAILS_ENV: beta
+    MYSQL_DATABASE_HOST: fizzy-beta-mysql-primary
+    MYSQL_DATABASE_REPLICA_HOST: fizzy-beta-mysql-replica
+    MYSQL_SOLID_CABLE_HOST: fizzy-beta-mysql-primary
+    MYSQL_SOLID_QUEUE_HOST: fizzy-beta-mysql-primary
+    MYSQL_SOLID_CACHE_HOST: fizzy-beta-mysql-primary
+  secret:
+    - RAILS_MASTER_KEY
+    - MYSQL_ALTER_PASSWORD
+    - MYSQL_ALTER_USER
+    - MYSQL_APP_PASSWORD
+    - MYSQL_APP_USER
+    - MYSQL_READONLY_PASSWORD
+    - MYSQL_READONLY_USER
+    - SECRET_KEY_BASE
+    - VAPID_PUBLIC_KEY
+    - VAPID_PRIVATE_KEY
+    - ACTIVE_STORAGE_ACCESS_KEY_ID
+    - ACTIVE_STORAGE_SECRET_ACCESS_KEY
+    - QUEENBEE_API_TOKEN
+    - SIGNAL_ID_SECRET
 
 accessories:
   load-balancer:
diff --git a/saas/config/deploy.production.yml b/saas/config/deploy.production.yml
index a26c9419e..e5eb5a978 100644
--- a/saas/config/deploy.production.yml
+++ b/saas/config/deploy.production.yml
@@ -37,9 +37,13 @@ env:
     - MYSQL_APP_USER
     - MYSQL_READONLY_PASSWORD
     - MYSQL_READONLY_USER
-    - QUEENBEE_API_TOKEN
+    - SECRET_KEY_BASE
     - VAPID_PUBLIC_KEY
     - VAPID_PRIVATE_KEY
+    - ACTIVE_STORAGE_ACCESS_KEY_ID
+    - ACTIVE_STORAGE_SECRET_ACCESS_KEY
+    - QUEENBEE_API_TOKEN
+    - SIGNAL_ID_SECRET
   tags:
     sc_chi:
       MYSQL_SOLID_CACHE_HOST: fizzy-solidcache-db-01.sc-chi-int.37signals.com
diff --git a/saas/config/deploy.staging.yml b/saas/config/deploy.staging.yml
index 84ed66fe4..a9dedf657 100644
--- a/saas/config/deploy.staging.yml
+++ b/saas/config/deploy.staging.yml
@@ -37,9 +37,13 @@ env:
     - MYSQL_APP_USER
     - MYSQL_READONLY_PASSWORD
     - MYSQL_READONLY_USER
-    - QUEENBEE_API_TOKEN
+    - SECRET_KEY_BASE
     - VAPID_PUBLIC_KEY
     - VAPID_PRIVATE_KEY
+    - ACTIVE_STORAGE_ACCESS_KEY_ID
+    - ACTIVE_STORAGE_SECRET_ACCESS_KEY
+    - QUEENBEE_API_TOKEN
+    - SIGNAL_ID_SECRET
   tags:
     sc_chi:
       MYSQL_SOLID_CACHE_HOST: fizzy-staging-solidcache-db-01.sc-chi-int.37signals.com