35 lines
1.7 KiB
Plaintext
35 lines
1.7 KiB
Plaintext
# traefik Stack — Secrets Reference
|
|
# Source: traefik.env
|
|
#
|
|
# Add SECRET values to Woodpecker at:
|
|
# https://woodpecker.bryanmail.net
|
|
# homelab/compose-files → Settings → Secrets
|
|
#
|
|
# ⚠️ HIGH RISK: Traefik is the entry point for all homelab services.
|
|
# If this stack fails, nothing is reachable from outside.
|
|
# Migrate carefully. The Keepalived VIP (192.168.4.30) depends on this stack.
|
|
|
|
# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
|
|
|
|
# Woodpecker secret name: traefik_keepalived_password
|
|
# Used for: Keepalived VRRP authentication password
|
|
# Must match across all 3 nodes (docker-1, docker-2, docker-3)
|
|
# Env var in .env: KEEPALIVED_PASSWORD
|
|
traefik_keepalived_password=
|
|
|
|
# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
|
|
|
|
# KEEPALIVED_UNICAST_PEERS Python2BASH list of peer IPs
|
|
# KEEPALIVED_VIRTUAL_IPS Python2BASH list of VIP addresses (192.168.4.30)
|
|
# ACME_EMAIL Let's Encrypt certificate email
|
|
# TRUSTED_IPS Trusted proxy CIDR ranges
|
|
# TRAEFIK_HOST Traefik dashboard hostname
|
|
# SPEEDTEST_HOST Speedtest Traefik hostname
|
|
# WHOAMI_HOST Whoami Traefik hostname
|
|
|
|
# ── Woodpecker provision-secrets case entry ───────────────────────────────────
|
|
#
|
|
# traefik)
|
|
# create_or_update_secret "traefik_keepalived_password" "$TRAEFIK_KEEPALIVED_PASSWORD"
|
|
# ;;
|