Repository navigation
[tracking] remaining vault secrets #228
Description
should be migrated to nomad variables
- apps/devspace
secret/devspace/ssh
- apps/ircbot
secret/ircbot/credentialssecret/ircbot/webhook
- apps/maddy
secret/lego/data/certificates/_.voidlinux.org.crtsecret/lego/data/certificates/_.voidlinux.org.key
- build/signing
secret/repomgmt/signing
- infrastructure/lego
secret/lego/do_api
- infrastructure/nginx-*
secret/lego/data/certificates/_.voidlinux.org.crtsecret/lego/data/certificates/_.voidlinux.org.key
- monitoring/alertrelay
secret/alertrelay/credentials
Activity
the-maldridge commentedon Apr 11, 2025
The maddy and nginx ones should use the certs that are already in nomad vars, and the lego job should just be removed. We had two different processes for renewing certs, and we should dedup down to just the one we're using.
the-maldridge commentedon Apr 15, 2025
All remaining tasks do not make use of vault policies. We should do another sweep, then un-hook the legacy vault integration and update nomad.