diff --git a/ansible/app-configs/crowdsec_local-api-credentials.yaml.j2 b/ansible/app-configs/crowdsec_local-api-credentials.yaml.j2 new file mode 100644 index 00000000..5335296f --- /dev/null +++ b/ansible/app-configs/crowdsec_local-api-credentials.yaml.j2 @@ -0,0 +1,6 @@ +{% set vault_addr = 'https://vault.trez.wtf' %} +{% set secrets_path = 'rinoa-docker/env' %} + +url: http://0.0.0.0:8080 +login: localhost +password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['CROWDSEC_LOCAL_API_KEY'] }} \ No newline at end of file diff --git a/ansible/app-configs/soularr_config.ini.j2 b/ansible/app-configs/soularr_config.ini.j2 index d2f72e8a..2de58ec5 100644 --- a/ansible/app-configs/soularr_config.ini.j2 +++ b/ansible/app-configs/soularr_config.ini.j2 @@ -1,3 +1,6 @@ +{% set vault_addr = 'https://vault.trez.wtf' %} +{% set secrets_path = 'rinoa-docker/env' %} + [Lidarr] api_key = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['LIDARR_API_KEY'] }} host_url = http://lidarr:8686 diff --git a/docker-compose.yml b/docker-compose.yml index 19015190..9a1b7833 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -697,6 +697,7 @@ services: - 8908:3000 restart: always volumes: + - ${DOCKER_VOLUME_CONFIG}/crowdsec/local-api-credentials.yaml:/etc/crowdsec/local_api_credentials.yaml - source: crowdsec-db target: /data/ type: volume @@ -4630,7 +4631,7 @@ services: environment: DNSPLUGIN: cloudflare EMAIL: charish.patel@trez.wtf - EXTRA_DOMAINS: + EXTRA_DOMAINS: ONLY_SUBDOMAINS: false PGID: 1000 PUID: 1000