From 9a5b028e078e837af2845fdf3558c52fb2911bbc Mon Sep 17 00:00:00 2001 From: admin Date: Tue, 28 Jul 2026 07:20:52 -0700 Subject: [PATCH] postgresql: document replication + patroni secrets (ADR-0001 Phase 1) --- secrets/postgresql.secrets.example | 35 +++++++++++++++++++++--------- 1 file changed, 25 insertions(+), 10 deletions(-) diff --git a/secrets/postgresql.secrets.example b/secrets/postgresql.secrets.example index 744ec5e..499fb50 100644 --- a/secrets/postgresql.secrets.example +++ b/secrets/postgresql.secrets.example @@ -14,29 +14,44 @@ # take down multiple services simultaneously. Ensure you have a # working backup before making any changes. -# ── SECRETS (add to Woodpecker) ─────────────────────────────────────────────── +# ── SECRETS (add to Woodpecker) ────────────────────────────────────────── # Woodpecker secret name: postgresql_password -# Used for: PostgreSQL master password (PGadmin superuser) -# ⚠️ Used by nearly every other stack -# Env var in .env: POSTGRES_PASSWORD +# Used for: PostgreSQL master password (PGadmin superuser) +# ⚠️ Used by nearly every other stack +# Env var in .env: POSTGRES_USER postgresql_password= # Woodpecker secret name: postgresql_pgadmin_password -# Used for: PGAdmin web UI login password -# Env var in .env: PGADMIN_DEFAULT_PASSWORD +# Used for: PGAdmin web UI login password +# Env var in .env: PGADMIN_DEFAULT_PASSWORD postgresql_pgadmin_password= -# ── NON-SECRETS (safe in compose file or .env) ──────────────────────────────── +# Woodpecker secret name: postgresql_replication_password +# Used for: Patroni streaming-replication role password +# (used by patroni-0/patroni-1 for pg_basebackup + +# WAL streaming between primary and standby) +# Added: ADR-0001 HA build-out (Phase 1) +postgresql_replication_password= + +# Woodpecker secret name: postgresql_patroni_password +# Used for: Patroni REST API basic-auth password (:8008) +# (used by HAProxy health checks and patronictl) +# Added: ADR-0001 HA build-out (Phase 1) +postgresql_patroni_password= + +# ── NON-SECRETS (safe in compose file or .env) ─────────────────────────── # POSTGRES_USER Master PostgreSQL username (PGadmin) # PGADMIN_DEFAULT_EMAIL PGAdmin login email # DATABASUS_HOST Traefik hostname for pgAdmin # PGADMIN_HOST Traefik hostname for pgAdmin UI -# ── Woodpecker provision-secrets case entry ─────────────────────────────────── +# ── Woodpecker provision-secrets case entry ────────────────────────────── # # postgresql) -# create_or_update_secret "postgresql_password" "$POSTGRESQL_PASSWORD" -# create_or_update_secret "postgresql_pgadmin_password" "$POSTGRESQL_PGADMIN_PASSWORD" +# create_or_update_secret "postgresql_password" "$POSTGRESQL_PASSWORD" +# create_or_update_secret "postgresql_pgadmin_password" "$POSTGRESQL_PGADMIN_PASSWORD" +# create_or_update_secret "postgresql_replication_password" "$POSTGRESQL_REPLICATION_PASSWORD" +# create_or_update_secret "postgresql_patroni_password" "$POSTGRESQL_PATRONI_PASSWORD" # ;;