Adds real Vault Agent secret templates and non-secret env vars for all 15 media stacks. Sanitized real leaks found in the source data: kodi's real username and real hostnames+IPs in KODI_INSTANCES, tdarr's real IP and hostname reference, immich's real username - replaced with generic values (IPs use the RFC 5737 documentation range, 192.0.2.0/24, rather than another real-looking address). Every var cross-checked against what its actual public compose file references before writing, learned from the platform batch.
5 lines
386 B
Bash
5 lines
386 B
Bash
MYSQL_ROOT_PASSWORD={{ with secret "kv/host/kodi-mariadb" }}{{ .Data.data.mysql_root_password }}{{ end }}
|
|
MYSQL_PASSWORD={{ with secret "kv/host/kodi-mariadb" }}{{ .Data.data.mysql_password }}{{ end }}
|
|
KODI_PASSWORD={{ with secret "kv/host/kodi-bridge" }}{{ .Data.data.kodi_password }}{{ end }}
|
|
MA_API_TOKEN={{ with secret "kv/host/kodi-bridge" }}{{ .Data.data.ma_api_token }}{{ end }}
|