feat(release): split accounts public and secret vars

This commit is contained in:
Haitao Pan 2026-03-16 19:10:37 +08:00
parent d500976236
commit 2886a64741
3 changed files with 15 additions and 13 deletions

View File

@ -1,6 +1,6 @@
[defaults]
inventory = ansible/inventory.ini
roles_path = ansible/roles:../github-org-cloud-neutral-toolkit/ansible/roles
roles_path = ansible/roles:../../ansible/roles:../github-org-cloud-neutral-toolkit/ansible/roles
host_key_checking = False
retry_files_enabled = False
interpreter_python = auto_silent

View File

@ -1,5 +1,6 @@
# Copy to ansible/vars/accounts.host.yml (gitignored), or store the real values
# in an external Ansible Vault file and pass it with:
# Public release defaults now live in ansible/vars/accounts.release.public.yml.
# Copy only the secret values below to ansible/vars/accounts.host.yml (gitignored),
# or store the real values in an external Ansible Vault file and pass it with:
# ansible-playbook -D -C ansible/playbooks/deploy_accounts_compose.yml -e @/secure/path/accounts.vault.yml
service_compose_image: ghcr.io/YOUR_GITHUB_ORG/accounts:latest
@ -7,19 +8,9 @@ service_compose_registry_server: ghcr.io
service_compose_registry_username: CHANGE_ME
service_compose_registry_password: CHANGE_ME
service_compose_env_common:
CONFIG_TEMPLATE: /app/config/account.cloudrun.yaml
INTERNAL_SERVICE_TOKEN: CHANGE_ME
DB_TLS_HOST: postgresql-aws.svc.plus
DB_TLS_PORT: "5443"
POSTGRES_USER: postgres
POSTGRES_PASSWORD: CHANGE_ME
DB_USER: postgres
DB_NAME: account
DB_PASSWORD: CHANGE_ME
SMTP_HOST: smtp.qq.com
SMTP_PORT: "587"
SMTP_FROM: XControl Account <noreply@svc.plus>
SMTP_USERNAME: CHANGE_ME
SMTP_PASSWORD: CHANGE_ME
service_compose_deploy_targets:
- name: prod

View File

@ -0,0 +1,11 @@
service_compose_env_common:
CONFIG_TEMPLATE: /app/config/account.cloudrun.yaml
DB_TLS_HOST: postgresql-aws.svc.plus
DB_TLS_PORT: "5443"
POSTGRES_USER: postgres
DB_USER: postgres
DB_NAME: account
SMTP_HOST: smtp.qq.com
SMTP_PORT: "587"
SMTP_FROM: "XControl Account <manbuzhe2009@qq.com>"
SMTP_USERNAME: manbuzhe2009@qq.com