homelab/compose-files
0
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

postgresql: document replication + patroni secrets (ADR-0001 Phase 1)
ci/woodpecker/push/deploy Pipeline failed
Details

Browse Source
This commit is contained in:
admin
2026-07-28 07:20:52 -07:00
parent 0f26d31a02
commit 9a5b028e07
1 changed files with 25 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
secrets/postgresql.secrets.example
+25 -10
View File
@@ -14,29 +14,44 @@
# take down multiple services simultaneously. Ensure you have a # take down multiple services simultaneously. Ensure you have a
# working backup before making any changes. # working backup before making any changes.
# ── SECRETS (add to Woodpecker) ─────────────────────────────────────────────── # ── SECRETS (add to Woodpecker) ──────────────────────────────────────────
# Woodpecker secret name: postgresql_password # Woodpecker secret name: postgresql_password
# Used for: PostgreSQL master password (PGadmin superuser) # Used for: PostgreSQL master password (PGadmin superuser)
# ⚠️ Used by nearly every other stack # ⚠️ Used by nearly every other stack
# Env var in .env: POSTGRES_PASSWORD # Env var in .env: POSTGRES_USER
postgresql_password= postgresql_password=
# Woodpecker secret name: postgresql_pgadmin_password # Woodpecker secret name: postgresql_pgadmin_password
# Used for: PGAdmin web UI login password # Used for: PGAdmin web UI login password
# Env var in .env: PGADMIN_DEFAULT_PASSWORD # Env var in .env: PGADMIN_DEFAULT_PASSWORD
postgresql_pgadmin_password= postgresql_pgadmin_password=
# ── NON-SECRETS (safe in compose file or .env) ──────────────────────────────── # Woodpecker secret name: postgresql_replication_password
# Used for: Patroni streaming-replication role password
# (used by patroni-0/patroni-1 for pg_basebackup +
# WAL streaming between primary and standby)
# Added: ADR-0001 HA build-out (Phase 1)
postgresql_replication_password=
# Woodpecker secret name: postgresql_patroni_password
# Used for: Patroni REST API basic-auth password (:8008)
# (used by HAProxy health checks and patronictl)
# Added: ADR-0001 HA build-out (Phase 1)
postgresql_patroni_password=
# ── NON-SECRETS (safe in compose file or .env) ───────────────────────────
# POSTGRES_USER Master PostgreSQL username (PGadmin) # POSTGRES_USER Master PostgreSQL username (PGadmin)
# PGADMIN_DEFAULT_EMAIL PGAdmin login email # PGADMIN_DEFAULT_EMAIL PGAdmin login email
# DATABASUS_HOST Traefik hostname for pgAdmin # DATABASUS_HOST Traefik hostname for pgAdmin
# PGADMIN_HOST Traefik hostname for pgAdmin UI # PGADMIN_HOST Traefik hostname for pgAdmin UI
# ── Woodpecker provision-secrets case entry ─────────────────────────────────── # ── Woodpecker provision-secrets case entry ──────────────────────────────
# #
# postgresql) # postgresql)
# create_or_update_secret "postgresql_password" "$POSTGRESQL_PASSWORD" # create_or_update_secret "postgresql_password" "$POSTGRESQL_PASSWORD"
# create_or_update_secret "postgresql_pgadmin_password" "$POSTGRESQL_PGADMIN_PASSWORD" # create_or_update_secret "postgresql_pgadmin_password" "$POSTGRESQL_PGADMIN_PASSWORD"
# create_or_update_secret "postgresql_replication_password" "$POSTGRESQL_REPLICATION_PASSWORD"
# create_or_update_secret "postgresql_patroni_password" "$POSTGRESQL_PATRONI_PASSWORD"
# ;; # ;;