Ansible DRY fixes for Vault lookups.
Gitea Branch PR & Ansible Deployment / Check and Create PR (push) Failing after 3m6s
Gitea Branch PR & Ansible Deployment / Docker Compose & Ansible Lints (push) Has been skipped
Gitea Branch PR & Ansible Deployment / PR Merge (push) Failing after 9m4s
Gitea Branch PR & Ansible Deployment / Ansible Configs & Docker Compose Deployment (push) Has been skipped

This commit is contained in:
2025-05-20 09:06:49 -04:00
parent c804bb6dab
commit 6b37ad8ea4
37 changed files with 118 additions and 112 deletions
+4 -4
View File
@@ -18,13 +18,13 @@ web_server:
main_db:
host: mariadb
username: postal
password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['POSTAL_MYSQL_PASSWORD'] }}
password: {{ vault_secrets['POSTAL_MYSQL_PASSWORD'] }}
database: postal
message_db:
host: mariadb
username: postal
password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['POSTAL_MYSQL_PASSWORD'] }}
password: {{ vault_secrets['POSTAL_MYSQL_PASSWORD'] }}
prefix: postal
smtp_server:
@@ -52,11 +52,11 @@ smtp:
host: postal-smtp
port: 25
username: rinoa/postal-smtp
password: "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['POSTAL_SMTP_AUTH_PASSWORD'] }}"
password: "{{ vault_secrets['POSTAL_SMTP_AUTH_PASSWORD'] }}"
from_name: Postal @ Rinoa
from_address: noreply@trez.wtf
rails:
# This is generated automatically by the config initialization. It should be a random
# string unique to your installation.
secret_key: "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['POSTAL_RAILS_SECRET_KEY'] }}"
secret_key: "{{ vault_secrets['POSTAL_RAILS_SECRET_KEY'] }}"