Migrate Photos VM to read secrets from Infisical (#25)
Some checks failed
Infrastructure / Check and run Ansbile playbooks (push) Failing after 2m3s

#21 provisioned an Infisical service (https://secrets.koval.net/). We can use this instead of the hacky solution that can explode.

Contributes to and closes #16.

Reviewed-on: #25
This commit is contained in:
2024-01-04 13:09:16 +00:00
parent a8b7b1df4a
commit 8529d56c44
4 changed files with 6 additions and 33 deletions

View File

@@ -25,12 +25,12 @@
ansible.builtin.replace:
path: "{{ user.home }}/{{ app }}/.env"
regexp: "TYPESENSE_API_KEY_VALUE"
replace: "{{ lookup('ansible.builtin.password', user.home + '/typesense_secret', length=64, chars=['ascii_letters', 'digits']) }}"
replace: "{{ lookup('infisical_vault', env_slug='prod', path='/photos', secret_name='TYPESENSE_API_KEY') }}"
- name: Replace DB secret
ansible.builtin.replace:
path: "{{ user.home }}/{{ app }}/.env"
regexp: "DB_PASSWORD_VALUE"
replace: "{{ lookup('ansible.builtin.password', user.home + '/db_secret', length=64, chars=['ascii_letters', 'digits']) }}"
replace: "{{ lookup('infisical_vault', env_slug='prod', path='/photos', secret_name='DB_PASSWORD') }}"
- name: Docker compose up -d
ansible.builtin.command: docker compose up -d
args: