aboutsummaryrefslogtreecommitdiff
path: root/cluster/prod/app/garage/secrets.toml
diff options
context:
space:
mode:
Diffstat (limited to 'cluster/prod/app/garage/secrets.toml')
-rw-r--r--cluster/prod/app/garage/secrets.toml14
1 files changed, 14 insertions, 0 deletions
diff --git a/cluster/prod/app/garage/secrets.toml b/cluster/prod/app/garage/secrets.toml
new file mode 100644
index 0000000..e616091
--- /dev/null
+++ b/cluster/prod/app/garage/secrets.toml
@@ -0,0 +1,14 @@
+[secrets."garage/rpc_secret"]
+type = 'command'
+command = 'openssl rand -hex 32'
+# can't auto-rotate, because we still have some nodes outside of Nomad
+
+[secrets."garage/admin_token"]
+type = 'command'
+command = 'openssl rand -hex 32'
+rotate = true
+
+[secrets."garage/metrics_token"]
+type = 'command'
+command = 'openssl rand -hex 32'
+rotate = true