aboutsummaryrefslogtreecommitdiff
path: root/cluster/prod/app/plume/secrets.toml
blob: a44597949a90727f371643691377b986230c0334 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
[service_user."plume"]
password_secret = "plume/pgsql_pw"


[secrets."plume/secret_key"]
type = 'command'
rotate = true
command = 'openssl rand -base64 32'


# Plume backup

[secrets."plume/backup_restic_repository"]
type = 'user'
description = 'Restic repository'
example = 's3:https://s3.garage.tld'

[secrets."plume/backup_restic_password"]
type = 'user'
description = 'Restic password to encrypt backups'

[secrets."plume/backup_aws_secret_access_key"]
type = 'user'
description = 'Backup AWS secret access key'

[secrets."plume/backup_aws_access_key_id"]
type = 'user'
description = 'Backup AWS access key ID'