thesabear
5d9f5be89e
Adds the real Vault Agent secret-rendering templates and non-secret env vars for authentik, vaultwarden, and wazuh - sanitized (real domain/email/SMTP provider genericized, kv/<host>/... paths use a generic 'host' placeholder instead of the real hostname). This is the standing pattern for the rest of stacks/ going forward.
5 lines
400 B
Bash
5 lines
400 B
Bash
AUTHENTIK_SECRET_KEY={{ with secret "kv/host/authentik" }}{{ .Data.data.authentik_secret_key }}{{ end }}
|
|
AUTHENTIK_EMAIL__PASSWORD={{ with secret "kv/host/authentik" }}{{ .Data.data.email_password }}{{ end }}
|
|
POSTGRES_PASSWORD={{ with secret "kv/host/authentik" }}{{ .Data.data.pg_pass }}{{ end }}
|
|
AUTHENTIK_POSTGRESQL__PASSWORD={{ with secret "kv/host/authentik" }}{{ .Data.data.pg_pass }}{{ end }}
|