serguzim/infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactor the vault/secrets

Browse source
This commit is contained in:
Tobias Reisinger 2026-02-06 21:41:42 +01:00
parent 11c339ce92
commit 28f2e9a33a
Signed by: serguzim
GPG key ID: 13AD60C237A28DFE
32 changed files with 144 additions and 83 deletions
Download patch file Download diff file Expand all files Collapse all files

4
playbooks/roles/lgtm_stack/defaults/main.yml
View file

@ -6,6 +6,8 @@ lgtm_stack_loki_domain: "{{ all_services | service_get_domain('loki') }}"
lgtm_stack_alloy_jobs: "{{ all_services | services_to_alloy() }}"
lgtm_stack_grafana_secret_key: "{{ undef() }}"
lgtm_stack_svc:
domain: "{{ lgtm_stack_domain }}"
@ -35,7 +37,7 @@ lgtm_stack_env:
GF_SECURITY_DISABLE_INITIAL_ADMIN_CREATION: true
GF_SECURITY_ADMIN_USER: "{{ admin_email }}"
GF_SECURITY_SECRET_KEY: "{{ vault_lgtm_stack.grafana.secret_key }}"
GF_SECURITY_SECRET_KEY: "{{ lgtm_stack_grafana_secret_key | mandatory }}"
GF_SECURITY_COOKIE_SECURE: true
GF_SECURITY_COOKIE_SAMESITE: "strict"