Michael Schiemer
f2b375da27
- Add Jinja2 template for monitoring stack .env file - Add Ansible tasks to generate passwords and create .env automatically - Update vault example with monitoring credentials - Remove manual deploy.sh script (using Ansible instead) - Add app-internal network creation task
31 lines
967 B
Plaintext
31 lines
967 B
Plaintext
---
|
|
# Ansible Vault Example
|
|
# Copy this file to production.vault.yml and encrypt with:
|
|
# ansible-vault encrypt production.vault.yml
|
|
|
|
# Database Credentials
|
|
vault_db_password: "change-me-secure-db-password"
|
|
vault_db_root_password: "change-me-secure-root-password"
|
|
|
|
# Redis Credentials
|
|
vault_redis_password: "change-me-secure-redis-password"
|
|
|
|
# Application Secrets
|
|
vault_app_key: "change-me-base64-encoded-32-byte-key"
|
|
vault_jwt_secret: "change-me-jwt-signing-secret"
|
|
|
|
# Mail Configuration
|
|
vault_mail_password: "change-me-mail-password"
|
|
|
|
# Docker Registry Credentials
|
|
vault_docker_registry_username: "gitea-user"
|
|
vault_docker_registry_password: "change-me-registry-password"
|
|
|
|
# Optional: Additional Secrets
|
|
vault_encryption_key: "change-me-encryption-key"
|
|
vault_session_secret: "change-me-session-secret"
|
|
|
|
# Monitoring Stack Credentials
|
|
vault_grafana_admin_password: "change-me-secure-grafana-password"
|
|
vault_prometheus_password: "change-me-secure-prometheus-password"
|