fix(traefik): remove tracked traefik.env — never commit secret-bearing env files · 5edebd977d - compose-files

fix(traefik): remove tracked traefik.env — never commit secret-bearing env files

The committed version contained a literal "***REDACTED***" placeholder as
KEEPALIVED_PASSWORD, which was restored onto disk every time the real file
was deleted or the local checkout re-synced from git. This caused VRRP auth
to mismatch between keepalived-master and keepalived-backup (master picked
up the broken committed value, backup retained a stale-but-correct value),
producing a continuous "(VI_1) received an invalid passwd!" flood and VIP
instability. traefik.env is now rendered fresh from traefik.env.template by
deploy/provision-stack.py on every provisioning run and never committed.

This commit is contained in:

Bot

2026-09-11 22:38:39 -07:00

parent ffec3ea5b7

commit 5edebd977d

1 changed files with 0 additions and 2 deletions

									
										traefik/traefik.env
									
		-2
	
												View File
											
					@@ -1,2 +0,0 @@

					KEEPALIVED_PASSWORD=***REDACTED***

					KEEPALIVED_VIRTUAL_IPS="#PYTHON2BASH:['192.168.4.30']"

		`@@ -1,2 +0,0 @@`
			`KEEPALIVED_PASSWORD=*REDACTED*`
			`KEEPALIVED_VIRTUAL_IPS="#PYTHON2BASH:['192.168.4.30']"`