From 03d108b267a394dfae5d0a514bf8fac5be85794e Mon Sep 17 00:00:00 2001 From: admin Date: Sat, 20 Jun 2026 23:20:24 -0700 Subject: [PATCH] Add auth secrets reference --- secrets/auth.secrets.example | 38 ++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 secrets/auth.secrets.example diff --git a/secrets/auth.secrets.example b/secrets/auth.secrets.example new file mode 100644 index 0000000..74e5575 --- /dev/null +++ b/secrets/auth.secrets.example @@ -0,0 +1,38 @@ +# auth Stack — Secrets Reference +# Source: auth.env +# +# Add SECRET values to Woodpecker at: +# https://woodpecker.bryanmail.net +# homelab/compose-files → Settings → Secrets + +# ── SECRETS (add to Woodpecker) ─────────────────────────────────────────────── + +# Woodpecker secret name: auth_pg_password +# Used for: Authentik PostgreSQL password (PGadmin user) +# Env var in .env: AUTHENTIK_POSTGRESQL__PASSWORD +auth_pg_password= + +# Woodpecker secret name: auth_secret_key +# Used for: Authentik secret key for session signing and crypto +# Env var in .env: AUTHENTIK_SECRET_KEY +auth_secret_key= + +# Woodpecker secret name: auth_pg_password2 +# Used for: Authentik app-level PostgreSQL password (Authentik user) +# Env var in .env: AUTHENTIK_POSTGRESQL__PASSWORD2 +auth_pg_password2= + +# ── NON-SECRETS (safe in compose file or .env) ──────────────────────────────── + +# AUTHENTIK_POSTGRESQL__HOST PostgreSQL hostname (postgresql) +# AUTHENTIK_POSTGRESQL__USER PostgreSQL superuser (PGadmin) +# AUTHENTIK_POSTGRESQL__NAME Database name (authentik) +# AUTHENTIK_POSTGRESQL__USER2 Authentik app user (Authentik) + +# ── Woodpecker provision-secrets case entry ─────────────────────────────────── +# +# auth) +# create_or_update_secret "auth_pg_password" "$AUTH_PG_PASSWORD" +# create_or_update_secret "auth_secret_key" "$AUTH_SECRET_KEY" +# create_or_update_secret "auth_pg_password2" "$AUTH_PG_PASSWORD2" +# ;;