2026-07-14 09:27:24 -07:00
|
|
|
kubeconfig_path = "cluster-config/kubeconfig"
|
|
|
|
|
cluster_domain = "riotpiao.homelab.com"
|
|
|
|
|
|
2026-07-14 13:14:46 -07:00
|
|
|
# Backend S3 credentials (MinIO)
|
|
|
|
|
# Set via environment variables instead:
|
|
|
|
|
# export AWS_ACCESS_KEY_ID=$(grep MINIO_ROOT_USER .env | cut -d= -f2)
|
|
|
|
|
# export AWS_SECRET_ACCESS_KEY=$(grep MINIO_ROOT_PASSWORD .env | cut -d= -f2)
|
|
|
|
|
s3_access_key = ""
|
|
|
|
|
s3_secret_key = ""
|
|
|
|
|
|
|
|
|
|
# Vault token for terraform vault provider
|
|
|
|
|
# Set via environment variable:
|
|
|
|
|
# export VAULT_TOKEN=$(vault login -method=oidc ...)
|
|
|
|
|
vault_token = ""
|
|
|
|
|
|
|
|
|
|
# Cluster secrets loaded from .env (extract via 'vsource' alias)
|
|
|
|
|
# Or populate these manually from Vault/secrets manager
|
2026-07-14 09:27:24 -07:00
|
|
|
authentik_secret_key = "changeme-min-32-characters-long-value"
|
|
|
|
|
authentik_bootstrap_password = "changeme"
|
|
|
|
|
authentik_bootstrap_token = "changeme"
|
|
|
|
|
authentik_pg_password = "changeme"
|
|
|
|
|
postgres_password = "changeme"
|
|
|
|
|
minio_root_user = "minioadmin"
|
|
|
|
|
minio_root_password = "changeme"
|
|
|
|
|
minio_oidc_client_secret = "changeme"
|
|
|
|
|
grafana_admin_password = "changeme"
|
|
|
|
|
grafana_oidc_client_secret = "changeme"
|
|
|
|
|
forgejo_admin_password = "changeme"
|
|
|
|
|
authentik_forgejo_client_secret = "changeme"
|
|
|
|
|
authentik_argocd_client_id = "argocd"
|
|
|
|
|
authentik_argocd_client_secret = "changeme"
|
|
|
|
|
authentik_temporal_client_id = "temporal"
|
|
|
|
|
authentik_temporal_client_secret = "changeme"
|
|
|
|
|
argocd_admin_password = "changeme"
|
|
|
|
|
argocd_oidc_client_secret = "changeme"
|
