funman300
23 lines
910 B
Plaintext
23 lines
910 B
Plaintext
# DO NOT COMMIT THE REAL VERSION OF THIS FILE.
|
|
# apps/obsidian-livesync/couchdb-secret.yaml is gitignored — apply it manually once:
|
|
#
|
|
# cp apps/obsidian-livesync/couchdb-secret.yaml.example apps/obsidian-livesync/couchdb-secret.yaml
|
|
# # fill in real values below, then:
|
|
# kubectl apply -f apps/obsidian-livesync/couchdb-secret.yaml
|
|
# kubectl annotate secret couchdb-secret -n obsidian \
|
|
# argocd.argoproj.io/sync-options=Prune=false --overwrite
|
|
#
|
|
# Generate strong values with:
|
|
# python3 -c "import secrets; print(secrets.token_urlsafe(18))" # password
|
|
# python3 -c "import secrets; print(secrets.token_hex(32))" # COUCHDB_SECRET
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: couchdb-secret
|
|
namespace: obsidian
|
|
stringData:
|
|
COUCHDB_USER: "admin"
|
|
COUCHDB_PASSWORD: "CHANGE_ME"
|
|
# Erlang/OTP cookie — must be a long random hex string
|
|
COUCHDB_SECRET: "CHANGE_ME_HEX_32_BYTES"
|