steffen/cryodev
1
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

rename admin_key to steffen_key, add forgejo admin account step

Browse source 
- Rename SOPS key alias from generic admin_key to steffen_key in
  .sops.yaml and all docs (keys should identify the person, not a role)
- Add step 3.6 to first-install docs: create Forgejo admin account
  via CLI (required since DISABLE_REGISTRATION is enabled)
- Fix cryodev-pi_key comment naming in .sops.yaml
This commit is contained in:
steffen 2026-03-14 12:33:09 +01:00
parent dbf98e2f22
commit 7e31405f91
5 changed files with 38 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

12
docs/services/sops.md
View file

@ -31,7 +31,7 @@ Add the host key to `.sops.yaml`:
```yaml
keys:
- &admin_key age1e8p35795htf7twrejyugpzw0qja2v33awcw76y4gp6acnxnkzq0s935t4t
- &steffen_key age1e8p35795htf7twrejyugpzw0qja2v33awcw76y4gp6acnxnkzq0s935t4t # steffen (local)
- &main_key age1... # cryodev-main
- &pi_key age1... # cryodev-pi
@ -39,14 +39,14 @@ creation_rules:
- path_regex: hosts/cryodev-main/secrets.yaml$
key_groups:
- age:
- *admin_key
- *main_key
- *steffen_key
- *main_key
- path_regex: hosts/cryodev-pi/secrets.yaml$
key_groups:
- age:
- *admin_key
- *pi_key
- *steffen_key
- *pi_key
```
### 3. Create Secrets File