bump config version

set rpc secret file and quote wrap
set secret permissions to be non-world readable
2026-05-08 15:00:42 -04:00 · 2026-05-08 15:00:33 -04:00 · 2026-05-08 15:00:16 -04:00
3 changed files with 4 additions and 3 deletions
--- a/abra.sh
+++ b/abra.sh
@ -1 +1 @@
-export GARAGE_CONF_VERSION=v5
+export GARAGE_CONF_VERSION=v7
--- a/compose.yml
+++ b/compose.yml
@ -9,7 +9,8 @@ services:
      - source: garage_conf
        target: /etc/garage.toml
    secrets:
-      - rpc_secret
+      - source: rpc_secret
+        mode: 0600
    networks:
      - proxy
      - internal
--- a/garage.toml.tmpl
+++ b/garage.toml.tmpl
@ -15,7 +15,7 @@ compression_level = 2
 rpc_bind_addr = "[::]:3901"
 rpc_public_addr = "{{ env "DOMAIN" }}:3901"
 rpc_addr = "[::]:3901"
-rpc_secret = "{{ secret "rpc_secret" }}"
+rpc_secret_file = "/run/secrets/rpc_secret"

 {{ if ne (env "BOOTSTRAP_ID") "" }}
 bootstrap_peers = [
Author	SHA1	Message	Date
Brooke	10be86624f	bump config version	2026-05-08 15:00:42 -04:00
Brooke	49b4a117c2	set rpc secret file and quote wrap	2026-05-08 15:00:33 -04:00
Brooke	3101458354	set secret permissions to be non-world readable	2026-05-08 15:00:16 -04:00