serguzim/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactor the vault/secrets

Browse source
This commit is contained in:
Tobias Reisinger 2026-02-06 21:41:42 +01:00
parent 11c339ce92
commit 28f2e9a33a
Signed by: serguzim
GPG key ID: 13AD60C237A28DFE
32 changed files with 144 additions and 83 deletions
Download patch file Download diff file Expand all files Collapse all files

4
playbooks/roles/authentik/defaults/main.yml
View file

@ -1,4 +1,6 @@
---
authentik_secret_key: "{{ undef() }}"
authentik_svc:
domain: "{{ all_services | service_get_domain(role_name) }}"
port: 9000
@ -11,7 +13,7 @@ authentik_svc:
database: "{{ opentofu.postgresql_data.authentik.database }}"
authentik_env:
AUTHENTIK_SECRET_KEY: "{{ vault_authentik.secret_key }}"
AUTHENTIK_SECRET_KEY: "{{ authentik_secret_key | mandatory }}"
AUTHENTIK_EMAIL__HOST: "{{ mailer.host }}"
AUTHENTIK_EMAIL__PORT: "{{ mailer.port }}"