Add productivity secrets reference

2026-06-20 23:22:45 -07:00
parent 62d4883020
commit 11470d9115
1 changed files with 48 additions and 0 deletions
@@ -0,0 +1,48 @@
+# productivity Stack — Secrets Reference
+# Source: productivity.env
+#
+# Add SECRET values to Woodpecker at:
+#   https://woodpecker.bryanmail.net
+#   homelab/compose-files → Settings → Secrets
+
+# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
+
+# Woodpecker secret name:  productivity_paperless_secret_key
+# Used for:               Paperless-ngx secret key for session signing
+# Env var in .env:        PAPERLESS_SECRET_KEY
+productivity_paperless_secret_key=
+
+# Woodpecker secret name:  productivity_db_password
+# Used for:               Paperless-ngx PostgreSQL database password
+# Env var in .env:        PAPERLESS_DBPASS
+productivity_db_password=
+
+# Woodpecker secret name:  productivity_oidc_providers
+# Used for:               Paperless-ngx Authentik SSO config (contains client_id + secret)
+#                         NOTE: This is a JSON blob — store the entire value as-is
+# Env var in .env:        PAPERLESS_SOCIALACCOUNT_PROVIDERS
+productivity_oidc_providers=
+
+# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
+
+# PAPERLESS_URL                          Public URL
+# PAPERLESS_CSRF_TRUSTED_ORIGINS         CSRF allowed origins
+# PAPERLESS_TIME_ZONE                    Timezone
+# PAPERLESS_OCR_LANGUAGE                 OCR language (eng)
+# PAPERLESS_DBNAME                       Database name (paperless)
+# PAPERLESS_DBUSER                       Database username (paperless)
+# PAPERLESS_APPS                         Django app list
+# PAPERLESS_LOGOUT_REDIRECT_URL          Authentik logout URL
+# PAPERLESS_SOCIAL_AUTO_SIGNUP           Boolean flag
+# PAPERLESS_SOCIALACCOUNT_ALLOW_SIGNUPS  Boolean flag
+# PAPERLESS_TRUSTED_PROXIES              Trusted proxy CIDR
+# PAPERLESS_USE_X_FORWARD_HOST           Boolean flag
+# PAPERLESS_USE_X_FORWARD_PORT           Boolean flag
+
+# ── Woodpecker provision-secrets case entry ───────────────────────────────────
+#
+#   productivity)
+#     create_or_update_secret "productivity_paperless_secret_key" "$PRODUCTIVITY_PAPERLESS_SECRET_KEY"
+#     create_or_update_secret "productivity_db_password"          "$PRODUCTIVITY_DB_PASSWORD"
+#     create_or_update_secret "productivity_oidc_providers"       "$PRODUCTIVITY_OIDC_PROVIDERS"
+#     ;;