feat(release): split accounts public and secret vars
This commit is contained in:
parent
d500976236
commit
2886a64741
@ -1,6 +1,6 @@
|
|||||||
[defaults]
|
[defaults]
|
||||||
inventory = ansible/inventory.ini
|
inventory = ansible/inventory.ini
|
||||||
roles_path = ansible/roles:../github-org-cloud-neutral-toolkit/ansible/roles
|
roles_path = ansible/roles:../../ansible/roles:../github-org-cloud-neutral-toolkit/ansible/roles
|
||||||
host_key_checking = False
|
host_key_checking = False
|
||||||
retry_files_enabled = False
|
retry_files_enabled = False
|
||||||
interpreter_python = auto_silent
|
interpreter_python = auto_silent
|
||||||
|
|||||||
@ -1,5 +1,6 @@
|
|||||||
# Copy to ansible/vars/accounts.host.yml (gitignored), or store the real values
|
# Public release defaults now live in ansible/vars/accounts.release.public.yml.
|
||||||
# in an external Ansible Vault file and pass it with:
|
# Copy only the secret values below to ansible/vars/accounts.host.yml (gitignored),
|
||||||
|
# or store the real values in an external Ansible Vault file and pass it with:
|
||||||
# ansible-playbook -D -C ansible/playbooks/deploy_accounts_compose.yml -e @/secure/path/accounts.vault.yml
|
# ansible-playbook -D -C ansible/playbooks/deploy_accounts_compose.yml -e @/secure/path/accounts.vault.yml
|
||||||
|
|
||||||
service_compose_image: ghcr.io/YOUR_GITHUB_ORG/accounts:latest
|
service_compose_image: ghcr.io/YOUR_GITHUB_ORG/accounts:latest
|
||||||
@ -7,19 +8,9 @@ service_compose_registry_server: ghcr.io
|
|||||||
service_compose_registry_username: CHANGE_ME
|
service_compose_registry_username: CHANGE_ME
|
||||||
service_compose_registry_password: CHANGE_ME
|
service_compose_registry_password: CHANGE_ME
|
||||||
service_compose_env_common:
|
service_compose_env_common:
|
||||||
CONFIG_TEMPLATE: /app/config/account.cloudrun.yaml
|
|
||||||
INTERNAL_SERVICE_TOKEN: CHANGE_ME
|
INTERNAL_SERVICE_TOKEN: CHANGE_ME
|
||||||
DB_TLS_HOST: postgresql-aws.svc.plus
|
|
||||||
DB_TLS_PORT: "5443"
|
|
||||||
POSTGRES_USER: postgres
|
|
||||||
POSTGRES_PASSWORD: CHANGE_ME
|
POSTGRES_PASSWORD: CHANGE_ME
|
||||||
DB_USER: postgres
|
|
||||||
DB_NAME: account
|
|
||||||
DB_PASSWORD: CHANGE_ME
|
DB_PASSWORD: CHANGE_ME
|
||||||
SMTP_HOST: smtp.qq.com
|
|
||||||
SMTP_PORT: "587"
|
|
||||||
SMTP_FROM: XControl Account <noreply@svc.plus>
|
|
||||||
SMTP_USERNAME: CHANGE_ME
|
|
||||||
SMTP_PASSWORD: CHANGE_ME
|
SMTP_PASSWORD: CHANGE_ME
|
||||||
service_compose_deploy_targets:
|
service_compose_deploy_targets:
|
||||||
- name: prod
|
- name: prod
|
||||||
|
|||||||
11
ansible/vars/accounts.release.public.yml
Normal file
11
ansible/vars/accounts.release.public.yml
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
service_compose_env_common:
|
||||||
|
CONFIG_TEMPLATE: /app/config/account.cloudrun.yaml
|
||||||
|
DB_TLS_HOST: postgresql-aws.svc.plus
|
||||||
|
DB_TLS_PORT: "5443"
|
||||||
|
POSTGRES_USER: postgres
|
||||||
|
DB_USER: postgres
|
||||||
|
DB_NAME: account
|
||||||
|
SMTP_HOST: smtp.qq.com
|
||||||
|
SMTP_PORT: "587"
|
||||||
|
SMTP_FROM: "XControl Account <manbuzhe2009@qq.com>"
|
||||||
|
SMTP_USERNAME: manbuzhe2009@qq.com
|
||||||
Loading…
Reference in New Issue
Block a user