basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
stack.basicstack.de/apps/passbolt/passbolt-secret-sealed.yaml

28 lines
9.3 KiB
YAML
Raw Normal View History

Convert all secrets to SealedSecrets for enhanced security This commit converts all application secrets to SealedSecrets, preventing plaintext secrets from being stored in git. Changes: - Added .gitignore to prevent future plaintext secret commits - Created 20 SealedSecret manifests across 8 applications: * Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup * Directus (5 secrets): admin, agent token, app secrets, DB, OIDC * Paperclip (4 secrets): main secrets, auth, OIDC, session * Forgejo (2 secrets): postgres, backup * BookStack (2 secrets): OIDC, MySQL * Passbolt (2 secrets): MariaDB, app secrets * Pocket ID (1 secret) - Removed hardcoded secrets from 6 stalwart deployment files - Replaced plaintext credentials with references to sealed secrets All sealed secrets have been applied to the cluster and services verified to be running correctly. Related: DEV-203 Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-01 18:38:27 +00:00
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
name: passbolt-secret
namespace: passbolt
spec:
encryptedData:
Move Passbolt deployment configuration to Git - Add all Kubernetes manifest files for Passbolt deployment - Add MariaDB deployment, service, PVC manifests - Add Passbolt deployment, service, PVC, ingress manifests - Add namespace manifest - Update passbolt-secret to include SMTP authentication - Add README with initial admin user setup instructions The configuration was extracted from the running cluster and organized into separate manifest files for better maintainability. SMTP is configured to use Stalwart mail server with: - Username: passbolt - Email: passbolt@basicstack.de - Host: stalwart-mail.stalwart.svc.cluster.local Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-25 16:57:35 +00:00
APP_FULL_BASE_URL: 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
DATASOURCES_DEFAULT_DATABASE: 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
DATASOURCES_DEFAULT_HOST: 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
DATASOURCES_DEFAULT_PASSWORD: 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
DATASOURCES_DEFAULT_USERNAME: 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
EMAIL_DEFAULT_FROM: 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
EMAIL_TRANSPORT_DEFAULT_HOST: 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
EMAIL_TRANSPORT_DEFAULT_PASSWORD: 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
EMAIL_TRANSPORT_DEFAULT_PORT: AgBz5kQIjVp6ZZWQ63MJn2lmLOIOf+Z6thh7VKtVGToDodTsuEU6IIQ1FdSA54A/JMiKJ0/Al0QU0y95vZN7q804zHr7V/njxlNWw6ADa1l8ITooMNFDp9ANt3OiKs6QYAYbTKqDTk8HbV/D22pBCU/oh05VMVHWKdRi43/G87RhZhIWFs7TxU0lnn42N8GWbWqf5oHwWa+nXKWE3aclqBQoJBsBK9mLxgf8m4S80sLP0EfqNoVLHTeoktS2BKtKjB3HlTVUUA2xoO+FJDrkcKNrQcHR/0Ely/PhsHdZJNiekTzk97DVvQ6zax2gRJG9eImt6K6Ol1VRCs4mC+PJ7Lfa1B4vnx9CeQDse8B2tSYJnLkmJimgNrYog0X8Sg21LqCMxo3j/Nweor9nkNFUIYDvsql50NoSwxCo+dpMzI67XMZVbKqkchN/0sz+/LBH5e25IgLAbYF5du8gveLUmCVQIou0UsyvxampVC5KmlNndpc+bpBWOf1l2SDau7Y5M8K84Qt4iAuLj9OyObLtf7avpn3awK+isx+OdR6wjB+a+DzgqPkF6J0IpXbLHN/LcmD11inP5WkqhCGb8LnrJv/ZWhu2mFIjAyIeQ2JRcdU369Pjkn5yC6Cb0qov+G/fU1Cz7B4W3V+BwqRy+DEVWBKruxEEjLo0lgKJk3hBrvNAz/svjwA/jOiR3VaAS8fJvgy6hw==
EMAIL_TRANSPORT_DEFAULT_TLS: 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
EMAIL_TRANSPORT_DEFAULT_USERNAME: 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
PASSBOLT_JWT_SERVER_EXPONENT: AgBTo8fM7g7pN1/3XG+oazxDVKy28jCOhq8P7VuKTX4CZhrm24hJ5CWbQoa+UZ7nDSjgwGOm1vaVFyMhqO1klax6InjLgNsVtOF6iFBtBwMvkalR99pJMWpgRTXvV2iYrbgK9715XtY6Od3KEYQeMts37k+f0ueejL3l0gOAD0bAPfcXY/wVw/WC6PRZqfZEdkUVyKNY7yznDLXt5Alm05z8OUiyvU20MBnnBlmuxS4oPVsydOxtEtWCDtsSNl8dgqjURA4sYR7nb1QjHrkO+uc3fITFuClHMUwys/o/Fr9OTLR7y3SebSiQgdWEQGHSlSXDJerhJ/PtXza1MSglNgTAN7lcqFrP9zncoj4EDtHykmpoZqBaQNUZrSWfaWDLKepSKN86oeOaqpQnMkA+DFtVJg9Wef4b6D9GjNqYO3oiRNegxjgLhj5ht1/ViuYy6YNAvlOLREUVx1OgRoq1fB7TdhR8ScmvSE1EYWmQuprfwQxBaBk4Kn17vumJVtfDnsfves8fgOlfq0UxiiUEMGz7rdtGOOwDNifqKfjl9e0gGdSaoV/IqTU0SleiX0KKLvgL5NJ/F8NXv3esXyfpzaJz5V8FPeQSrlHzzwZJLLd1R8e9Gmf7Vt3ZAITcMR2vkDWt8KALpkDEv8KOQeF43SxiLauNqBJeW+MRhWbezR5KUdblcSxkRDU34ZlZzWyWmAIU87TW4Rzrbb7axl+pRY0u6FGQ6ox1qT8NgZgwZvMU4IshbHtXxro/zFGmEg==
Convert all secrets to SealedSecrets for enhanced security This commit converts all application secrets to SealedSecrets, preventing plaintext secrets from being stored in git. Changes: - Added .gitignore to prevent future plaintext secret commits - Created 20 SealedSecret manifests across 8 applications: * Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup * Directus (5 secrets): admin, agent token, app secrets, DB, OIDC * Paperclip (4 secrets): main secrets, auth, OIDC, session * Forgejo (2 secrets): postgres, backup * BookStack (2 secrets): OIDC, MySQL * Passbolt (2 secrets): MariaDB, app secrets * Pocket ID (1 secret) - Removed hardcoded secrets from 6 stalwart deployment files - Replaced plaintext credentials with references to sealed secrets All sealed secrets have been applied to the cluster and services verified to be running correctly. Related: DEV-203 Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-01 18:38:27 +00:00
template:
metadata:
creationTimestamp: null
name: passbolt-secret
namespace: passbolt
type: Opaque
Move Passbolt deployment configuration to Git - Add all Kubernetes manifest files for Passbolt deployment - Add MariaDB deployment, service, PVC manifests - Add Passbolt deployment, service, PVC, ingress manifests - Add namespace manifest - Update passbolt-secret to include SMTP authentication - Add README with initial admin user setup instructions The configuration was extracted from the running cluster and organized into separate manifest files for better maintainability. SMTP is configured to use Stalwart mail server with: - Username: passbolt - Email: passbolt@basicstack.de - Host: stalwart-mail.stalwart.svc.cluster.local Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-25 16:57:35 +00:00
---
Reference in a new issue Copy permalink