From 8cee3b0043eda68d982e5359a0d009c83cbb85c4 Mon Sep 17 00:00:00 2001 From: Alex Auvolat Date: Sun, 25 Dec 2022 22:45:05 +0100 Subject: Update prod secret files --- cluster/prod/app/matrix/secrets.toml | 71 +++++++++++++++++++----------------- 1 file changed, 37 insertions(+), 34 deletions(-) (limited to 'cluster/prod/app/matrix/secrets.toml') diff --git a/cluster/prod/app/matrix/secrets.toml b/cluster/prod/app/matrix/secrets.toml index 6e4f027..98b2ddb 100644 --- a/cluster/prod/app/matrix/secrets.toml +++ b/cluster/prod/app/matrix/secrets.toml @@ -7,8 +7,9 @@ password_secret = 'chat/synapse/ldap_bindpw' # Postgresql DB [secrets."chat/synapse/postgres_db"] -type = 'constant' -value = 'synapse' +type = 'user' +description = 'Synapse PostgrSQL database name' +example = 'synapse' [secrets."chat/synapse/postgres_user"] type = 'service_username' @@ -56,37 +57,39 @@ rotate = true command = 'head -c 32 /dev/urandom | base64' -# ----------- COTURN ----------- - -[secrets."chat/coturn/static-auth"] -type = 'user' -description = 'coturn static-auth (what is this?)' - -[secrets."chat/coturn/static_auth_secret_zinzdev"] -type = 'user' -description = "Serveur coturn (TURN/STUN) d'Adrien, c'est un jeton d'identification." - - -# ----------- EASYBRIDGE (we will remove this one day) ----------- - -[service_users."easybridge"] -description = 'Easybridge service user' -password_secret = 'chat/easybridge/db_pass' -username_secret = 'chat/easybridge/db_user' - +# ===== OLD STUFF, KEPT FOR REFERENCE ==== -[secrets."chat/easybridge/as_token"] -type = 'command' -rotate = true -command = 'openssl rand -hex 32' - -[secrets."chat/easybridge/web_session_key"] -type = 'command' -rotate = true -command = 'openssl rand -hex 32' - -[secrets."chat/easybridge/hs_token"] -type = 'command' -rotate = true -command = 'openssl rand -hex 32' +# ----------- COTURN ----------- +# [secrets."chat/coturn/static-auth"] +# type = 'user' +# description = 'coturn static-auth (what is this?)' +# +# [secrets."chat/coturn/static_auth_secret_zinzdev"] +# type = 'user' +# description = "Serveur coturn (TURN/STUN) d'Adrien, c'est un jeton d'identification." + + +# ----------- EASYBRIDGE ----------- + +# [service_users."easybridge"] +# description = 'Easybridge service user' +# password_secret = 'chat/easybridge/db_pass' +# username_secret = 'chat/easybridge/db_user' +# +# +# [secrets."chat/easybridge/as_token"] +# type = 'command' +# rotate = true +# command = 'openssl rand -hex 32' +# +# [secrets."chat/easybridge/web_session_key"] +# type = 'command' +# rotate = true +# command = 'openssl rand -hex 32' +# +# [secrets."chat/easybridge/hs_token"] +# type = 'command' +# rotate = true +# command = 'openssl rand -hex 32' +# -- cgit v1.2.3