diff options
author | Alex Auvolat <alex@adnab.me> | 2022-12-25 22:31:18 +0100 |
---|---|---|
committer | Alex Auvolat <alex@adnab.me> | 2022-12-25 22:31:18 +0100 |
commit | 87bb031ed00b7993a29d74aee2e89875c5444caf (patch) | |
tree | 80ebbf8c3870b3dfa756905fa55af938b503e283 /cluster/prod/app/telemetry/secrets.toml | |
parent | 6d6e48c8fa7f4f38a5b812389d269c025a977790 (diff) | |
download | nixcfg-87bb031ed00b7993a29d74aee2e89875c5444caf.tar.gz nixcfg-87bb031ed00b7993a29d74aee2e89875c5444caf.zip |
Migrate prod cluster secrets to new format
Diffstat (limited to 'cluster/prod/app/telemetry/secrets.toml')
-rw-r--r-- | cluster/prod/app/telemetry/secrets.toml | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/cluster/prod/app/telemetry/secrets.toml b/cluster/prod/app/telemetry/secrets.toml new file mode 100644 index 0000000..763a14c --- /dev/null +++ b/cluster/prod/app/telemetry/secrets.toml @@ -0,0 +1,16 @@ +[secrets."telemetry/grafana/admin_password"] +type = 'command' +rotate = true +command = 'openssl rand -base64 12' + + +# S3 database storage access + +[secrets."telemetry/grafana/s3_access_key"] +type = 'user' +description = 'S3 access key for grafana db' + +[secrets."telemetry/grafana/s3_secret_key"] +type = 'user' +description = 'S3 secret key for grafana db' + |