coulomb/railiance-apps
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Wire Forgejo SMTP password from OpenBao via External Secrets
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 5s
Details

Browse source 
Add forgejo-mailer ExternalSecret, inject GITEA__mailer__PASSWD from the
synced Secret, remove mailer from SOPS overlay, and add ESO bootstrap targets.
This commit is contained in:
tegwick 2026-07-07 14:30:02 +02:00
parent 24c8882b69
commit d5bb4f66f2
7 changed files with 141 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

10
helm/forgejo-secrets.sops.yaml.template
View file

@ -1,5 +1,7 @@
# Encrypt as helm/forgejo-secrets.sops.yaml before production deploy.
# Contains database PASSWD, admin password, and IONOS SMTP mailbox password.
# Contains database PASSWD and admin password consumed by the gitea chart.
# IONOS SMTP password lives in OpenBao platform/workloads/forgejo/forgejo-mailer
# and is synced by manifests/forgejo-mailer-externalsecret.yaml.
#
# gitea:
# admin:
@ -7,13 +9,9 @@
# config:
# database:
# PASSWD: <same as forgejo-db-credentials>
# mailer:
# PASSWD: <IONOS mailbox password for forgejo@coulomb.social>
gitea:
admin:
password: REPLACE_WITH_ADMIN_PASSWORD
config:
database:
PASSWD: REPLACE_WITH_DB_PASSWORD
mailer:
PASSWD: REPLACE_WITH_IONOS_MAILBOX_PASSWORD
PASSWD: REPLACE_WITH_DB_PASSWORD