fix(univention-management-stack): Use global secrets to set store-dav related passwords

This commit is contained in:
Johannes Bornhold
2023-09-04 12:04:14 +02:00
parent 4835a2beec
commit 90019e3ef6
4 changed files with 8 additions and 14 deletions

View File

@@ -26,11 +26,9 @@ secrets:
univentionManagementStack:
# TODO: Use "derivePassword"
ldapSecret: "univention"
# TODO: Use "derivePassword" and leave processing to the Helm chart
# Example, password set to "univention"
storeDavAuthHtpasswd: |
portal-server:$apr1$yruGWANI$75Soiqs3hEmezu.g/r3VW/
portal-listener:$apr1$6kadQ4Ji$hHriD5fpBJyf00SIy.NG41
storeDavUsers:
portalServer: {{ (derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-server" "store-dav" | sha1sum) }}
portalListener: {{ (derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-listener" "store-dav" | sha1sum) }}
postgresql:
postgresUser: {{ (derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "postgres" "postgres_user" | sha1sum) }}
keycloakUser: {{ (derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "postgres" "keycloak_user" | sha1sum) }}