Add setup scripts

scripts/gen-secrets.sh

@@ -0,0 +1,39 @@
+#!/bin/bash
+# Generate fresh credentials for AfakZaid RAG
+set -e
+gen() { openssl rand -base64 32 | tr -d '/+=' | head -c ${1:-32}; }
+
+REDIS_PASS=$(gen 32)
+QDRANT_KEY=$(gen 32)
+TYPESENSE_KEY=$(gen 40)
+FLOWER_PASS=$(gen 20)
+RAG_API_KEY="rag-$(gen 36)"
+ADMIN_KEY="admin-$(gen 36)"
+JWT_SECRET=$(gen 64)
+
+cat > /opt/rag/.secrets << EOF
+REDIS_PASSWORD=${REDIS_PASS}
+QDRANT_API_KEY=${QDRANT_KEY}
+TYPESENSE_API_KEY=${TYPESENSE_KEY}
+FLOWER_USER=afakadmin
+FLOWER_PASSWORD=${FLOWER_PASS}
+CELERY_BROKER_URL=redis://:${REDIS_PASS}@rag-redis:6379/1
+RAG_API_KEY=${RAG_API_KEY}
+ADMIN_KEY=${ADMIN_KEY}
+JWT_SECRET=${JWT_SECRET}
+# Fill in R2 credentials below:
+R2_ENDPOINT=
+R2_ACCESS_KEY=
+R2_SECRET_KEY=
+R2_BUCKET=
+R2_PUBLIC_URL=
+EOF
+chmod 600 /opt/rag/.secrets
+
+echo "Secrets written to /opt/rag/.secrets"
+echo ""
+echo "RAG_API_KEY : ${RAG_API_KEY}"
+echo "ADMIN_KEY   : ${ADMIN_KEY}"
+echo "FLOWER_PASS : ${FLOWER_PASS}"
+echo ""
+echo "Edit /opt/rag/.secrets to add R2 credentials, then run: bash scripts/start-all.sh"