diff options
| author | Alex Auvolat <alex@adnab.me> | 2023-05-15 17:30:41 +0200 |
|---|---|---|
| committer | Alex Auvolat <alex@adnab.me> | 2023-05-15 17:30:41 +0200 |
| commit | 560486bc50f5298d91706604339513f6840a2a18 (patch) | |
| tree | c1285189401eb621a2a26e462bd00d867760955b /cluster/prod/app/plume/secrets.toml | |
| parent | 2488ad0ac296732eb7c3c9c3bc28e1e73f5b06bc (diff) | |
| download | nixcfg-560486bc50f5298d91706604339513f6840a2a18.tar.gz nixcfg-560486bc50f5298d91706604339513f6840a2a18.zip | |
prod plume with s3 backendplume-s3
Diffstat (limited to 'cluster/prod/app/plume/secrets.toml')
| -rw-r--r-- | cluster/prod/app/plume/secrets.toml | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/cluster/prod/app/plume/secrets.toml b/cluster/prod/app/plume/secrets.toml index 4d68a5c..fd67a57 100644 --- a/cluster/prod/app/plume/secrets.toml +++ b/cluster/prod/app/plume/secrets.toml @@ -1,10 +1,15 @@ [service_user."plume"] password_secret = "plume/pgsql_pw" - [secrets."plume/secret_key"] type = 'command' rotate = true command = 'openssl rand -base64 32' +[secrets."plume/s3_access_key"] +type = 'user' +description = 'S3 access key ID for database and media storage' +[secrets."plume/s3_secret_key"] +type = 'user' +description = 'S3 secret key for database and media storage' |