resource "random_password" "db_password" {
  length  = 32
  special = false
}

resource "random_password" "jwt_access" {
  length  = 64
  special = false
}

resource "random_password" "jwt_refresh" {
  length  = 64
  special = false
}

resource "random_password" "entitlement_signing" {
  length  = 64
  special = false
}

resource "aws_ssm_parameter" "db_password" {
  name  = "/cibello/prod/db-password"
  type  = "SecureString"
  value = random_password.db_password.result
}

resource "aws_ssm_parameter" "jwt_access" {
  name  = "/cibello/prod/jwt-access"
  type  = "SecureString"
  value = random_password.jwt_access.result
}

resource "aws_ssm_parameter" "jwt_refresh" {
  name  = "/cibello/prod/jwt-refresh"
  type  = "SecureString"
  value = random_password.jwt_refresh.result
}

resource "aws_ssm_parameter" "entitlement_signing" {
  name  = "/cibello/prod/entitlement-signing"
  type  = "SecureString"
  value = random_password.entitlement_signing.result
}

resource "aws_ssm_parameter" "gemini_api_key" {
  name  = "/cibello/prod/gemini-api-key"
  type  = "SecureString"
  value = ""
}

resource "aws_ssm_parameter" "aamos_api_key" {
  name  = "/cibello/prod/aamos-api-key"
  type  = "SecureString"
  value = ""
}

resource "aws_ssm_parameter" "apple_private_key" {
  name  = "/cibello/prod/apple-private-key"
  type  = "SecureString"
  value = ""
}

resource "aws_ssm_parameter" "google_service_account_json" {
  name  = "/cibello/prod/google-service-account-json"
  type  = "SecureString"
  value = ""
}

resource "aws_ssm_parameter" "smtp_pass" {
  name  = "/cibello/prod/smtp-pass"
  type  = "SecureString"
  value = ""
}

resource "aws_ssm_parameter" "eoc_push_token" {
  name  = "/cibello/prod/eoc-push-token"
  type  = "SecureString"
  value = ""
}