# Redis

## Authenticated Redis URL

Wild Cloud's Redis requires a password. Apps that take a Redis URL must embed the password. Use Kubernetes env var expansion so the password isn't hardcoded:

```yaml
requiredSecrets:
  - redis.password

# In deployment env:
- name: REDIS_PASSWORD
  valueFrom:
    secretKeyRef:
      name: myapp-secrets
      key: redis.password
- name: REDIS_URL
  value: "redis://:$(REDIS_PASSWORD)@{{ .redis.host }}:6379"
```

`$(REDIS_PASSWORD)` is evaluated by Kubernetes at pod start from other env vars in the same container spec.

## Apps that don't support Redis passwords

Some apps only accept `REDIS_HOST` and `REDIS_PORT` with no password option (e.g. Ushahidi). Deploy a dedicated unauthenticated Redis sidecar for those apps and remove `redis` from `requires` in `manifest.yaml`:

```yaml
- name: redis
  image: redis:7-alpine
  args: ["--save", ""]  # disable persistence
```

Point the app's `REDIS_HOST` at the sidecar's service name.