stack.basicstack.de/apps/directus/directus-oidc-secret-sealed.yaml

---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  creationTimestamp: null
  name: directus-oidc-secret
  namespace: directus
spec:
  encryptedData:
    client-id: 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
    client-secret: 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
    issuer-url: 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
  template:
    metadata:
      creationTimestamp: null
      name: directus-oidc-secret
      namespace: directus
    type: Opaque
Convert all secrets to SealedSecrets for enhanced security This commit converts all application secrets to SealedSecrets, preventing plaintext secrets from being stored in git. Changes: - Added .gitignore to prevent future plaintext secret commits - Created 20 SealedSecret manifests across 8 applications: * Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup * Directus (5 secrets): admin, agent token, app secrets, DB, OIDC * Paperclip (4 secrets): main secrets, auth, OIDC, session * Forgejo (2 secrets): postgres, backup * BookStack (2 secrets): OIDC, MySQL * Passbolt (2 secrets): MariaDB, app secrets * Pocket ID (1 secret) - Removed hardcoded secrets from 6 stalwart deployment files - Replaced plaintext credentials with references to sealed secrets All sealed secrets have been applied to the cluster and services verified to be running correctly. Related: DEV-203 Co-Authored-By: Paperclip <noreply@paperclip.ing> 2026-07-01 18:38:27 +00:00			`---`
			`apiVersion: bitnami.com/v1alpha1`
			`kind: SealedSecret`
			`metadata:`
			`creationTimestamp: null`
			`name: directus-oidc-secret`
			`namespace: directus`
			`spec:`
			`encryptedData:`
			client-id: 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
			client-secret: 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
			issuer-url: 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
			`template:`
			`metadata:`
			`creationTimestamp: null`
			`name: directus-oidc-secret`
			`namespace: directus`
			`type: Opaque`