akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-08 06:54:41 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore(forgejo): archive le mot de passe admin break-glass au vault + doc (#98)

Browse source 
- vault_forgejo_admin_password (compte local forgejo-admin, accès de secours)
- doc : note DISABLE_REGISTRATION, section break-glass, su-exec git obligatoire

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
ALI YESILKAYA 2026-07-07 23:51:35 +02:00 • committed by GitHub
parent f6ab2b6882
commit 46298871fb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 197 additions and 176 deletions
Download patch file Download diff file Expand all files Collapse all files

2
CLAUDE.md
View file

@ -127,7 +127,7 @@ Variables chiffrées dans `ansible/group_vars/all/vault.yml` :
- `vault_authentik_secret_key`, `vault_authentik_redis_password` — copies de sûreté des valeurs du secret k8s `auth/authentik-secret`
- `vault_wireguard_server_private_key`, `vault_wireguard_peer_private_keys` — clés WireGuard (serveur + dict par pair)
- `vault_grafana_oauth_client_secret`, `vault_openwebui_oauth_client_secret`, `vault_argocd_oidc_client_secret` — secrets clients OIDC des apps du hub (= secrets k8s `monitoring/grafana-oauth-secret`, `ai/open-webui-oauth`, `argocd/argocd-oidc`)
- `vault_pg_forgejo_password`, `vault_forgejo_oauth_client_secret` — Forgejo (Git self-host) : base PG `forgejo` (= `ai/forgejo-secret`) + client secret OIDC Authentik
- `vault_pg_forgejo_password`, `vault_forgejo_oauth_client_secret`, `vault_forgejo_admin_password` — Forgejo (Git self-host) : base PG `forgejo` (= `ai/forgejo-secret`), client secret OIDC Authentik, mot de passe admin local break-glass (`forgejo-admin`)
---