From 441796165b442af4a654094a65cf0b86815e843f Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Mon, 20 Apr 2026 17:38:50 -0500
Subject: [PATCH] k8s: wire RESEND_API_KEY env and drop to 1 replica

Registration emails were crashing the LiveView because RESEND_API_KEY
lived in aprs-secrets but was never injected into the container env,
so Resend.Swoosh.Adapter raised at delivery time after the user row
was already persisted.
---
 k8s/deployment.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index cb47d57..649a878 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -4,7 +4,7 @@ metadata:
   name: aprs
   namespace: aprs
 spec:
-  replicas: 2
+  replicas: 1
   strategy:
     type: RollingUpdate
     rollingUpdate:
@@ -146,6 +146,11 @@ spec:
                 secretKeyRef:
                   name: aprs-secrets
                   key: SECRET_KEY_BASE
+            - name: RESEND_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: aprs-secrets
+                  key: RESEND_API_KEY
           envFrom:
             - secretRef:
                 name: aprs-db