stack.basicstack.de/apps/bookstack/bookstack-oidc-sealed.yaml

---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  creationTimestamp: null
  name: bookstack-oidc
  namespace: bookstack
spec:
  encryptedData:
    client-secret: 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
  template:
    metadata:
      creationTimestamp: null
      name: bookstack-oidc
      namespace: bookstack
    type: Opaque
Convert all secrets to SealedSecrets for enhanced security This commit converts all application secrets to SealedSecrets, preventing plaintext secrets from being stored in git. Changes: - Added .gitignore to prevent future plaintext secret commits - Created 20 SealedSecret manifests across 8 applications: * Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup * Directus (5 secrets): admin, agent token, app secrets, DB, OIDC * Paperclip (4 secrets): main secrets, auth, OIDC, session * Forgejo (2 secrets): postgres, backup * BookStack (2 secrets): OIDC, MySQL * Passbolt (2 secrets): MariaDB, app secrets * Pocket ID (1 secret) - Removed hardcoded secrets from 6 stalwart deployment files - Replaced plaintext credentials with references to sealed secrets All sealed secrets have been applied to the cluster and services verified to be running correctly. Related: DEV-203 Co-Authored-By: Paperclip <noreply@paperclip.ing> 2026-07-01 18:38:27 +00:00			`---`
			`apiVersion: bitnami.com/v1alpha1`
			`kind: SealedSecret`
			`metadata:`
			`creationTimestamp: null`
			`name: bookstack-oidc`
			`namespace: bookstack`
			`spec:`
			`encryptedData:`
			client-secret: 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
			`template:`
			`metadata:`
			`creationTimestamp: null`
			`name: bookstack-oidc`
			`namespace: bookstack`
			`type: Opaque`