Trez/tar-valon-ansible
4
0
Fork 0
Code Issues 1 Pull Requests Actions Activity

Hashicorp Vault lookup overhaul.
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (lunafreya) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (rikku) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (rinoa) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (ultima) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (lunafreya) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (rikku) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (rinoa) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (ultima) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Check and Create PR (push) Successful in 16s
Details
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (aranea) (push) Failing after 2m20s
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (aranea) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / PR Merge (push) Has been skipped
Details

Browse Source
This commit is contained in:
Trez.One
2026-07-13 11:23:42 -04:00
parent c96e822a0b
commit 4241fd0030
42 changed files with 127 additions and 111 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app-configs/rinoa/invidious/config.yml.j2
+6 -6
View File
@@ -15,7 +15,7 @@ db:
host: invidious-db
port: 5432
dbname: invidious
password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['INVID_PG_DB_PASSWORD'] }}
password: {{ vault.kv2_field('env','INVID_PG_DB_PASSWORD', vault_engine_mount_point) }}
##
## Database configuration using a single URI. This is an
@@ -88,7 +88,7 @@ check_tables: true
invidious_companion:
- private_url: "http://invidious-companion:8282"
# # Uncomment for advanced reverse proxy configuration (see above).
- public_url: https://invid.{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['MY_TLD'] }}/companion
- public_url: https://invid.{{ vault.kv2_field('env','MY_TLD', vault_engine_mount_point) }}/companion
##
## API key for Invidious companion, used for securing the communication
@@ -103,7 +103,7 @@ invidious_companion:
## Accepted values: a string (of length 16)
## Default: <none>
##
invidious_companion_key: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['INVID_COMPANION_KEY'] }}
invidious_companion_key: {{ vault.kv2_field('env','INVID_COMPANION_KEY', vault_engine_mount_point) }}
#########################################
#
@@ -271,8 +271,8 @@ https_only: false
## Accepted values: String
## Default: <none>
##
po_token: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['INVID_PO_TOKEN'] }}
visitor_data: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['INVID_VISITOR_DATA'] }}
po_token: {{ vault.kv2_field('env','INVID_PO_TOKEN', vault_engine_mount_point) }}
visitor_data: {{ vault.kv2_field('env','INVID_VISITOR_DATA', vault_engine_mount_point) }}
# -----------------------------
# Logging
@@ -532,7 +532,7 @@ jobs:
## Accepted values: a string
## Default: <none>
##
hmac_key: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['INVID_HMAC_KEY'] }}
hmac_key: {{ vault.kv2_field('env','INVID_HMAC_KEY', vault_engine_mount_point) }}
##
## List of video IDs where the "download" widget must be