fix secrets
continuous-integration/drone/push Build is failing Details

This commit is contained in:
Moritz 2023-10-19 15:33:29 +02:00
parent a85310346b
commit 90c8d0dbba
6 changed files with 20 additions and 12 deletions

View File

@ -7,8 +7,8 @@ services:
- db_password - db_password
- form_secret - form_secret
- keycloak_client_secret - keycloak_client_secret
- macaroon_secret_key - macaroon
- registration_shared_secret - registration
environment: environment:
- KEYCLOAK_CLIENT_DOMAIN - KEYCLOAK_CLIENT_DOMAIN
- KEYCLOAK_CLIENT_ID - KEYCLOAK_CLIENT_ID

View File

@ -6,8 +6,8 @@ services:
secrets: secrets:
- db_password - db_password
- form_secret - form_secret
- macaroon_secret_key - macaroon
- registration_shared_secret - registration
- smtp_password - smtp_password
environment: environment:
- SMTP_APP_NAME - SMTP_APP_NAME

View File

@ -6,8 +6,8 @@ services:
secrets: secrets:
- db_password - db_password
- form_secret - form_secret
- macaroon_secret_key - macaroon
- registration_shared_secret - registration
- turn_shared_secret - turn_shared_secret
environment: environment:
- TURN_ALLOW_GUESTS - TURN_ALLOW_GUESTS

View File

@ -39,8 +39,8 @@ services:
- "data:/data" - "data:/data"
secrets: secrets:
- db_password - db_password
- registration_shared_secret - registration
- macaroon_secret_key - macaroon
- form_secret - form_secret
environment: environment:
- ALLOWED_LIFETIME_MAX - ALLOWED_LIFETIME_MAX
@ -156,10 +156,10 @@ secrets:
db_password: db_password:
external: true external: true
name: ${STACK_NAME}_db_password_${SECRET_DB_PASSWORD_VERSION} name: ${STACK_NAME}_db_password_${SECRET_DB_PASSWORD_VERSION}
registration_shared_secret: registration:
external: true external: true
name: ${STACK_NAME}_registration_${SECRET_REGISTRATION_VERSION} name: ${STACK_NAME}_registration_${SECRET_REGISTRATION_VERSION}
macaroon_secret_key: macaroon:
external: true external: true
name: ${STACK_NAME}_macaroon_${SECRET_MACAROON_VERSION} name: ${STACK_NAME}_macaroon_${SECRET_MACAROON_VERSION}
form_secret: form_secret:

View File

@ -139,7 +139,7 @@ enable_3pid_lookup: {{ env "ENABLE_3PID_LOOKUP" }}
allow_guest_access: false allow_guest_access: false
# https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#registration_shared_secret # https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#registration_shared_secret
registration_shared_secret: {{ secret "registration_shared_secret" }} registration_shared_secret: {{ secret "registration" }}
{{ if eq (env "AUTO_JOIN_ROOM_ENABLED") "1" }} {{ if eq (env "AUTO_JOIN_ROOM_ENABLED") "1" }}
# https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#auto_join_rooms # https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#auto_join_rooms
@ -156,7 +156,7 @@ app_service_config_files: {{ env "APP_SERVICE_CONFIGS" }}
{{ end }} {{ end }}
# https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#macaroon_secret_key # https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#macaroon_secret_key
macaroon_secret_key: "{{ secret "macaroon_secret_key" }}" macaroon_secret_key: "{{ secret "macaroon" }}"
# https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#form_secret # https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#form_secret
form_secret: "{{ secret "form_secret" }}" form_secret: "{{ secret "form_secret" }}"

8
release/next Normal file
View File

@ -0,0 +1,8 @@
We had to rename some secrets: https://git.coopcloud.tech/coop-cloud/matrix-synapse/issues/35
Copy the secrets:
* `registration_shared_secret` to `registration`
* `macaroon_secret_key` to `macaroon`
Regeneration of these secrets should also work.