ginnoir
1ce63153ab
Media sites get Caddy forward_auth; Authentik scripts cover all proxy providers. BookStack OIDC and Plane admin routing fixes included, plus ops scripts for external auth on valhalla.
27 lines
1.2 KiB
Bash
27 lines
1.2 KiB
Bash
# dev stack secrets
|
|
TZ=America/Chicago
|
|
|
|
# Gitea
|
|
GITEA_DB_PASSWORD=gitea_d3vp4ss_9f2k
|
|
|
|
# code-server (VS Code in browser)
|
|
CODE_SERVER_PASSWORD=c0de_s3rver_pass
|
|
|
|
# BookStack wiki
|
|
# APP_KEY encrypts session data — DO NOT rotate without invalidating sessions.
|
|
BOOKSTACK_APP_KEY=base64:cSR6L4TPEbM2IFi9MyZcnmexvzAlIHAjn/qMzQKO/t4=
|
|
BOOKSTACK_DB_PASSWORD=bookstack_d3v_pass
|
|
BOOKSTACK_DB_ROOT_PASSWORD=bookstack_r00t_pass
|
|
BOOKSTACK_OIDC_CLIENT_ID=8YV4BI2JVIG1QzS2DbylEgqv56sgfiOVRXOgw2Z5
|
|
BOOKSTACK_OIDC_CLIENT_SECRET=wIyiw7LmGBORDyTdc2crSZryXJHzIq4gtajAKSpOU7e8BkBSO6SstM9gGPrnp4tbJhCFSQggYAgtYd5LOjUvQpSWInzm0JLlmLg1BTlPq5EVVieNYuWRCCQrerj8gRZ0
|
|
# BookStack reads OIDC_* directly (env_file); BOOKSTACK_* kept for Portainer UI mirror if using ${} in compose.
|
|
OIDC_CLIENT_ID=8YV4BI2JVIG1QzS2DbylEgqv56sgfiOVRXOgw2Z5
|
|
OIDC_CLIENT_SECRET=wIyiw7LmGBORDyTdc2crSZryXJHzIq4gtajAKSpOU7e8BkBSO6SstM9gGPrnp4tbJhCFSQggYAgtYd5LOjUvQpSWInzm0JLlmLg1BTlPq5EVVieNYuWRCCQrerj8gRZ0
|
|
|
|
# Plane project management
|
|
# Rotate with: openssl rand -hex 32
|
|
PLANE_SECRET_KEY=60gp0byfz2dvffa45cxl20p1scy9xbpf6d8c5y0geejgkyp1b52
|
|
PLANE_DB_PASSWORD=plane_d3v_p4ss_8x3m
|
|
PLANE_MINIO_USER=planeadmin
|
|
PLANE_MINIO_PASSWORD=plane_minio_p4ss
|