riotpiao-poimen/homelab
2
0
Fork 0
Code Issues 23 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

fix(gotify): use a 32-byte cookie secret for oauth2-proxy

Browse Source 
The first value was a base32 string, so oauth2-proxy rejected it at startup:
cookie_secret must be 16, 24, or 32 bytes to create an AES cipher, but is 56
bytes.
This commit is contained in:
rock
2026-10-27 12:08:13 -07:00
parent 03cebb0aeb
commit 549e0be502
1 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/argocd/secrets/gotify-oauth2-proxy-secrets.enc.yaml
+10 -10
View File
@@ -5,9 +5,9 @@ metadata:
namespace: notifications namespace: notifications
type: Opaque type: Opaque
data: data:
client-id: ENC[AES256_GCM,data:Q+XQAR6cfHKoiuxhPZs6khTvqT0A/JG6,iv:LqhfuhXOYPVB6FQpPpERzWRQ+nxgxHZo4qdJO/g52y8=,tag:V2eK2fyscQKmM3/MmDnNtg==,type:str] client-id: ENC[AES256_GCM,data:S5lZRc26tXKKs2rIRIYskUvcXqIyILV4,iv:YCvPZUG9bngg6eP7cu/NM+7tvhW9FUt/exbx9qvPSkg=,tag:6eT6QTGxHBeZCpPfoY8/Kg==,type:str]
client-secret: ENC[AES256_GCM,data:P7F+83CLDhHnTN+Qx3SeCFbCjVH4JHb2rSteCr3Dywcb1ysMSNvC+3HyBXzsfJJ/EErUrCPWuwlRmV5ySts1oIrWhKyWMJxNrUTzv4eoclat4RyV6SaNDg==,iv:ESO1OUIqZbZPEVUuHrqjskA4tuTX/sc5m+K6Eo319kI=,tag:2isdxjFbtosov88FHZdeaQ==,type:str] client-secret: ENC[AES256_GCM,data:7KiSmFHNHW02T/SQaNIybqdjDHc4js1ud8ad8cuqBelEbIkpmY0+xLyygcOs0x2UBQhauFaN0U1Ar/Nd+aRKHSJv/WOturrhM4CgdmDy5ngtjFDHnX/0+w==,iv:9VtU/N7cUiFqWab35RTOd3dDXjsAfpWab81D0HckDz4=,tag:mXaVbF4gOLzYyUF+qASSVA==,type:str]
cookie-secret: ENC[AES256_GCM,data:WoWiANSdju+Ep5MuZQNeT0BQdKf5cFvrDUZpe+4B0VeUmQqnvblFi3dciJOeBFom9xYYzUCAI2tUSmX+a6tdAObyoGvjdFmLh+WTfw==,iv:41gYYRkyDIqC3GPuZkoob81Wl2njFTY07j4Puzaq0s4=,tag:x6z33zZnFwvmWUQIVPcxdQ==,type:str] cookie-secret: ENC[AES256_GCM,data:S1ndrfNYUVTC1psmDM032zM8q9j3Ezuy20CXkW9oxLIo0KMH5JBJ9AFHJnoRD9GQGjAQz9fW+Qyr0IAq,iv:e3tBnVcQzSc1q3HtE1Z8dDSCLnHpKCTv3IrsY9L4Bsg=,tag:IC1NvxI4tTUGcI/M5XU7bw==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@@ -17,14 +17,14 @@ sops:
- recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla - recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2UURWblY4aTBOQjFSNDRL YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFdmhSZ3pVSnM2dXdmanRJ
YkRXVjVHK1QvYW1iR2o0UWVmdE94c2lkWDJjCnlXK1k3cnZBNEExbDU3eDhQZ3FT TCtvWXJLbXdTT0k4QlFYaEpCNVhsWVVQY0NzCnlVV0hkcEdxNE1jcGxDRi9nWUFS
TVcyckFiWHdRSjZHQ201Nnl6UFdTN28KLS0tIExQeE90VnM1WHRCYkpycjJtR0ht eDQrdEFnc0hVdWlIem8zWm9HNFE0L28KLS0tIDZKbjRBYVhYVm56K0dmNkpiT0Er
ZHFDNWhKeENSQzljZUNmdktDYWloUDQK/fOG8AjTb2TNqLbqNfArOs0mzInYNJVd NmJIZVBPOG5Od0xGOFBGYVFsc0JFZnMKwXSDzJKvkugll2QfYhJ6yGgHyJ3alwdC
iaYxnjH6AjhbLKdnmCpecTQpgx8GeFGIkefV/x5pgrdSUwn0lcvpSQ== uyu/fFspb14cmgNf1IbkeU/OcbcyzFRVU2o0E432fM9BMINoKBeD7Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2026-10-27T19:05:35Z" lastmodified: "2026-10-27T19:08:11Z"
mac: ENC[AES256_GCM,data:KZV3JNebQ+DbZZZ+e3fvtOGckwC9fmkIchh8DBJ0DMq9lbrPEhP4Juordmnrrs9vJvGxuFJ/KwUv9EELqBsuSy8c47+z7flEAXJiJCJkvVPL/jMidABsFqMALvNNrCqBPWvMHLZUj762DwxB2gKhSx3GLfRUXhm+ZiNcD+39EVw=,iv:ifUlEq/GhBc/QomJApkCaWc3f4ggXoLsvqjzZElO0fU=,tag:fMo+HBDUZdRXgfck+8AJbA==,type:str] mac: ENC[AES256_GCM,data:h8X5kXN97zS0UbU3Baz9TR/GpGQ/ErCc/qapMwPdlLVi4tRqgsSC7iHfOPPGU7lODkYdgCRocRjQxkXyYLJ1xC0jDxDmQ/1cGLvG8YYS1uCdnAOhd5rhjKgBSWMuu3/M/DRdEscp6Ucv3V6QdhUGwBT9lDeblo1a9vrjCk072qs=,iv:Fx4ivjkR8RKP20XIk5AYWU22enGKPrfzixafSOrhEh8=,tag:pC3uMpHHG4pBGTBxm0Vnrg==,type:str]
pgp: [] pgp: []
encrypted_regex: ^(data|stringData)$ encrypted_regex: ^(data|stringData)$
version: 3.9.3 version: 3.9.3