Add Vikunja deployment

2026-09-02 12:54:12 -07:00
parent 1b20db2e02
commit 148ad658ce
12 changed files with 441 additions and 0 deletions
@@ -0,0 +1,16 @@
+# Template only -- the real value lives in vikunja-sealedsecret.yaml, which is
+# produced by apps/vikunja/generate-secret.sh (sealed with the cluster's
+# sealed-secrets key). Do not commit this as a live secret.
+#
+# VIKUNJA_SERVICE_SECRET signs Vikunja JWTs and other cryptographic data. Without a
+# stable value Vikunja would generate a new random secret on every restart,
+# invalidating all issued session tokens. Use at least 64 hex chars (the generator
+# uses `openssl rand -hex 64`).
+apiVersion: v1
+kind: Secret
+metadata:
+  name: vikunja-secret
+  namespace: vikunja
+type: Opaque
+stringData:
+  VIKUNJA_SERVICE_SECRET: "REPLACE_WITH_LONG_RANDOM_HEX"