Align deploy paths and namespace with current k8s target

README.md

@@ -34,23 +34,16 @@ deploy-db.sh
 README.md
 ```
 
-## Database
+# Database
 
 The app connects to a PostgreSQL database using the `DATABASE_URL` environment variable.
 
-### Deploy / rotate the database secret on Kubernetes
+Kubernetes runtime uses:
 
-Run the helper script. It generates a secure random password, encrypts it to `~/.lahuasca-db-pass.enc`, and applies it to the `la-huasca-db-secrets` secret in the `la-huasca` namespace.
-
-```bash
-./deploy-db.sh
-```
-
-To reveal the stored password, use the PIN `78963`:
-
-```bash
-./deploy-db.sh reveal
-```
+- namespace: `lahuasca`
+- Postgres: 15, PVC-backed
+- app secrets: `calendar-db-secrets`, key `url`
+- ingress: Traefik on `lahuasca.com`
 
 ### Initialize the database schema and seed data
 
@@ -66,6 +59,8 @@ To reset everything (drops and recreates tables with seed data):
 curl -X POST "http://localhost:3000/api/db/init?reset=true"
 ```
 
+Note: database initialization is blocked in production. Use `reset=true` only if you actually want schema reinitialization.
+
 ## Authentication
 
 The app includes JWT-based session authentication backed by the database. Demo accounts are seeded automatically: