diff options
author | Alex Auvolat <alex@adnab.me> | 2022-12-25 22:45:05 +0100 |
---|---|---|
committer | Alex Auvolat <alex@adnab.me> | 2022-12-25 22:45:05 +0100 |
commit | 8cee3b0043eda68d982e5359a0d009c83cbb85c4 (patch) | |
tree | 18cfe4a2988f22fd4884b7f79136778cc1e44e7b /cluster/prod/app/matrix/secrets.toml | |
parent | 87bb031ed00b7993a29d74aee2e89875c5444caf (diff) | |
download | nixcfg-8cee3b0043eda68d982e5359a0d009c83cbb85c4.tar.gz nixcfg-8cee3b0043eda68d982e5359a0d009c83cbb85c4.zip |
Update prod secret files
Diffstat (limited to 'cluster/prod/app/matrix/secrets.toml')
-rw-r--r-- | cluster/prod/app/matrix/secrets.toml | 71 |
1 files changed, 37 insertions, 34 deletions
diff --git a/cluster/prod/app/matrix/secrets.toml b/cluster/prod/app/matrix/secrets.toml index 6e4f027..98b2ddb 100644 --- a/cluster/prod/app/matrix/secrets.toml +++ b/cluster/prod/app/matrix/secrets.toml @@ -7,8 +7,9 @@ password_secret = 'chat/synapse/ldap_bindpw' # Postgresql DB [secrets."chat/synapse/postgres_db"] -type = 'constant' -value = 'synapse' +type = 'user' +description = 'Synapse PostgrSQL database name' +example = 'synapse' [secrets."chat/synapse/postgres_user"] type = 'service_username' @@ -56,37 +57,39 @@ rotate = true command = 'head -c 32 /dev/urandom | base64' -# ----------- COTURN ----------- - -[secrets."chat/coturn/static-auth"] -type = 'user' -description = 'coturn static-auth (what is this?)' - -[secrets."chat/coturn/static_auth_secret_zinzdev"] -type = 'user' -description = "Serveur coturn (TURN/STUN) d'Adrien, c'est un jeton d'identification." - - -# ----------- EASYBRIDGE (we will remove this one day) ----------- - -[service_users."easybridge"] -description = 'Easybridge service user' -password_secret = 'chat/easybridge/db_pass' -username_secret = 'chat/easybridge/db_user' - +# ===== OLD STUFF, KEPT FOR REFERENCE ==== -[secrets."chat/easybridge/as_token"] -type = 'command' -rotate = true -command = 'openssl rand -hex 32' - -[secrets."chat/easybridge/web_session_key"] -type = 'command' -rotate = true -command = 'openssl rand -hex 32' - -[secrets."chat/easybridge/hs_token"] -type = 'command' -rotate = true -command = 'openssl rand -hex 32' +# ----------- COTURN ----------- +# [secrets."chat/coturn/static-auth"] +# type = 'user' +# description = 'coturn static-auth (what is this?)' +# +# [secrets."chat/coturn/static_auth_secret_zinzdev"] +# type = 'user' +# description = "Serveur coturn (TURN/STUN) d'Adrien, c'est un jeton d'identification." + + +# ----------- EASYBRIDGE ----------- + +# [service_users."easybridge"] +# description = 'Easybridge service user' +# password_secret = 'chat/easybridge/db_pass' +# username_secret = 'chat/easybridge/db_user' +# +# +# [secrets."chat/easybridge/as_token"] +# type = 'command' +# rotate = true +# command = 'openssl rand -hex 32' +# +# [secrets."chat/easybridge/web_session_key"] +# type = 'command' +# rotate = true +# command = 'openssl rand -hex 32' +# +# [secrets."chat/easybridge/hs_token"] +# type = 'command' +# rotate = true +# command = 'openssl rand -hex 32' +# |