Trez/rinoa-docker
4
0
Fork 0
Code Issues 1 Pull Requests 8 Actions Activity

Adding Jinja macro for Vault lookup.
Gitea Branch PR & Ansible Deployment / Check and Create PR (push) Successful in 6m4s
Details
Gitea Branch PR & Ansible Deployment / Ansible Lint (push) Failing after 15m39s
Details
Gitea Branch PR & Ansible Deployment / PR Merge (push) Successful in 7m16s
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (push) Successful in 14m40s
Details

Browse Source
This commit is contained in:
Trez.One
2025-06-13 21:52:09 -04:00
parent 7cf7c4a2aa
commit add421bb81
73 changed files with 191 additions and 114 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ansible/app-configs/invidious/config.yml.j2
+5 -4
View File
@@ -1,3 +1,4 @@
{% import '../macros/rinoa-macros.j2' as vault %}
{% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = 'rinoa-docker/env' %}
@@ -16,7 +17,7 @@ db:
host: invidious-db
port: 5432
dbname: invidious
password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['INVID_PG_DB_PASSWORD'] }}
password: {{ vault.vault_secret('env', 'INVID_PG_DB_PASSWORD') }}
##
## Database configuration using a single URI. This is an
@@ -210,8 +211,8 @@ https_only: false
## Accepted values: String
## Default: <none>
##
po_token: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['INVID_PO_TOKEN'] }}
visitor_data: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['INVID_VISITOR_DATA'] }}
po_token: {{ vault.vault_secret('env', 'INVID_PO_TOKEN') }}
visitor_data: {{ vault.vault_secret('env', 'INVID_VISITOR_DATA') }}
# -----------------------------
# Logging
@@ -471,7 +472,7 @@ jobs:
## Accepted values: a string
## Default: <none>
##
hmac_key: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['INVID_HMAC_KEY'] }}
hmac_key: {{ vault.vault_secret('env', 'INVID_HMAC_KEY') }}
##
## List of video IDs where the "download" widget must be