stacks: add .env + .env.secrets.ctmpl for media stacks

Adds real Vault Agent secret templates and non-secret env vars for
all 15 media stacks. Sanitized real leaks found in the source data:
kodi's real username and real hostnames+IPs in KODI_INSTANCES,
tdarr's real IP and hostname reference, immich's real username -
replaced with generic values (IPs use the RFC 5737 documentation
range, 192.0.2.0/24, rather than another real-looking address).

Every var cross-checked against what its actual public compose file
references before writing, learned from the platform batch.
This commit is contained in:
thesabear committed 2026-08-25 09:01:52 +03:00
1 parent 4fe385f3b5
commit e9bc00fde4
17 files changed
+166

No files matched your search

+4
View File
@@ -0,0 +1,4 @@
MYSQL_ROOT_PASSWORD={{ with secret "kv/host/kodi-mariadb" }}{{ .Data.data.mysql_root_password }}{{ end }}
MYSQL_PASSWORD={{ with secret "kv/host/kodi-mariadb" }}{{ .Data.data.mysql_password }}{{ end }}
KODI_PASSWORD={{ with secret "kv/host/kodi-bridge" }}{{ .Data.data.kodi_password }}{{ end }}
MA_API_TOKEN={{ with secret "kv/host/kodi-bridge" }}{{ .Data.data.ma_api_token }}{{ end }}