From 8300381623dd94b8fe24bba64f6b55a57cff8535 Mon Sep 17 00:00:00 2001 From: admin Date: Sat, 20 Jun 2026 23:23:34 -0700 Subject: [PATCH] Add traefik secrets reference --- secrets/traefik.secrets.example | 34 +++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 secrets/traefik.secrets.example diff --git a/secrets/traefik.secrets.example b/secrets/traefik.secrets.example new file mode 100644 index 0000000..37c2820 --- /dev/null +++ b/secrets/traefik.secrets.example @@ -0,0 +1,34 @@ +# traefik Stack — Secrets Reference +# Source: traefik.env +# +# Add SECRET values to Woodpecker at: +# https://woodpecker.bryanmail.net +# homelab/compose-files → Settings → Secrets +# +# ⚠️ HIGH RISK: Traefik is the entry point for all homelab services. +# If this stack fails, nothing is reachable from outside. +# Migrate carefully. The Keepalived VIP (192.168.4.30) depends on this stack. + +# ── SECRETS (add to Woodpecker) ─────────────────────────────────────────────── + +# Woodpecker secret name: traefik_keepalived_password +# Used for: Keepalived VRRP authentication password +# Must match across all 3 nodes (docker-1, docker-2, docker-3) +# Env var in .env: KEEPALIVED_PASSWORD +traefik_keepalived_password= + +# ── NON-SECRETS (safe in compose file or .env) ──────────────────────────────── + +# KEEPALIVED_UNICAST_PEERS Python2BASH list of peer IPs +# KEEPALIVED_VIRTUAL_IPS Python2BASH list of VIP addresses (192.168.4.30) +# ACME_EMAIL Let's Encrypt certificate email +# TRUSTED_IPS Trusted proxy CIDR ranges +# TRAEFIK_HOST Traefik dashboard hostname +# SPEEDTEST_HOST Speedtest Traefik hostname +# WHOAMI_HOST Whoami Traefik hostname + +# ── Woodpecker provision-secrets case entry ─────────────────────────────────── +# +# traefik) +# create_or_update_secret "traefik_keepalived_password" "$TRAEFIK_KEEPALIVED_PASSWORD" +# ;;