Compare commits
2 Commits
a60a1c44ad
...
0bde766c8c
| Author | SHA256 | Date | |
|---|---|---|---|
|
0bde766c8c
|
|||
|
01275e130e
|
@@ -34,12 +34,12 @@ secrets:
|
|||||||
################################################################################################################################
|
################################################################################################################################
|
||||||
luks:
|
luks:
|
||||||
backup:
|
backup:
|
||||||
note: "The value is '<share-identifier>:<password>' (colon-separated). Use the same dedicated destination and credentials across servers."
|
note: "The value is [<share-identifier>:<password>] (colon-separated). Use the same dedicated destination and credentials across servers."
|
||||||
scope: "offsite-backup"
|
scope: "offsite-backup"
|
||||||
type: "plain"
|
type: "plain"
|
||||||
value: "NextcloudFolderNameOrShareID:SuperSecurePassword123!"
|
value: "NextcloudFolderNameOrShareID:SuperSecurePassword123!"
|
||||||
boot:
|
boot:
|
||||||
note: "Dedicated passphrase for the '/boot' partition; chosen for easy manual input via the VPS web console."
|
note: "Dedicated passphrase for the [/boot] partition; chosen for easy manual input via the VPS web console."
|
||||||
scope: "luks"
|
scope: "luks"
|
||||||
type: "plain"
|
type: "plain"
|
||||||
value: "Ceterum_censeo_Bruxellam_et_Berolinum_delenda_esse!"
|
value: "Ceterum_censeo_Bruxellam_et_Berolinum_delenda_esse!"
|
||||||
@@ -59,7 +59,7 @@ secrets:
|
|||||||
seeds:
|
seeds:
|
||||||
mfa:
|
mfa:
|
||||||
info:
|
info:
|
||||||
note: "MFA version identifier (e.g., 'totp:v1') for seamless mfa secrets rollover."
|
note: "MFA version identifier, e.g., [totp:v1] for seamless mfa secrets rollover."
|
||||||
scope: "mfa"
|
scope: "mfa"
|
||||||
type: "plain"
|
type: "plain"
|
||||||
value: "totp:v1"
|
value: "totp:v1"
|
||||||
|
|||||||
@@ -190,7 +190,7 @@ yaml_secret() {
|
|||||||
|
|
||||||
yq -o=shell "${secrets_if}" >| "${__SECRETS}" && ciss_secrets_wiper "${secrets_if}"
|
yq -o=shell "${secrets_if}" >| "${__SECRETS}" && ciss_secrets_wiper "${secrets_if}"
|
||||||
|
|
||||||
sed -n -E '
|
sed -i -E '
|
||||||
/^[[:space:]]*(#|$)/b # Skip empty/comment lines.
|
/^[[:space:]]*(#|$)/b # Skip empty/comment lines.
|
||||||
s/^[[:space:]]*export[[:space:]]+// # Drop optional leading "export ".
|
s/^[[:space:]]*export[[:space:]]+// # Drop optional leading "export ".
|
||||||
/^[[:space:]]*[A-Za-z_][A-Za-z0-9_]*_value=/!b # Keep only *_value= assignments.
|
/^[[:space:]]*[A-Za-z_][A-Za-z0-9_]*_value=/!b # Keep only *_value= assignments.
|
||||||
|
|||||||
Reference in New Issue
Block a user