# Secret shells only. Values are set outside Terraform. 3CX secrets may already
# exist in prod from seahaven-door-unlock-api (PLAT-76); import those names
# rather than recreating:
#   terraform import 'aws_secretsmanager_secret.this["afterhours-shift-manager/3cx-domain"]' afterhours-shift-manager/3cx-domain

resource "aws_secretsmanager_secret" "this" {
  for_each = toset(local.secret_names)

  name                    = each.value
  recovery_window_in_days = 30

  tags = {
    Purpose = "afterhours-shift-manager secret shell"
  }
}