thesabear
4fe385f3b5
Adds real Vault Agent secret templates and non-secret env vars for 14 platform stacks (caddy, caddy-internal, dashy, docker-socket- proxy, dockhand, gitea, grafana-stack, hawser, kestra, kopia, mosquitto, nocodb, node-red, speedtest-tracker), sanitized per the kv/host/... convention established for identity-and-security. Also fixes 6 variable-name mismatches discovered while cross-checking every new .env/.ctmpl against what its actual public compose file references (the public compose files were already adapted from the private originals during an earlier reorg pass, so names don't always match 1:1): authentik (PG_USER/PG_DB/PG_PASS), gitea (added GITEA_DOMAIN/GITEA_ROOT_URL, dropped an unused duplicate-instance pair of vars), grafana-stack (GRAFANA_ADMIN_PASSWORD), kestra (added USERNAME/PASSWORD), kopia (SECRET_PASSWORD), nocodb (JWT_SECRET). Also dropped an unused DOCKER var across most stacks where the compose file hardcodes its path instead of referencing it.
17 lines
409 B
Bash
17 lines
409 B
Bash
AUTHENTIK_URL=https://authentik.local.example.com
|
|
|
|
# Exposed HTTP port
|
|
COMPOSE_PORT_HTTP=9000
|
|
|
|
AUTHENTIK_EMAIL__HOST=smtp.example.com
|
|
AUTHENTIK_EMAIL__PORT=587
|
|
AUTHENTIK_EMAIL__USERNAME=[email protected]
|
|
AUTHENTIK_EMAIL__USE_TLS=true
|
|
AUTHENTIK_EMAIL__USE_SSL=false
|
|
AUTHENTIK_EMAIL__TIMEOUT=30
|
|
AUTHENTIK_EMAIL__FROM=[email protected]
|
|
|
|
# Database Configuration
|
|
PG_USER=authentik
|
|
PG_DB=authentik
|