Nik Afiq
e6550d0e39
Stage 1 of REFACTOR_PLAN.md. values/gitea.yaml and config/dashy/conf.yaml now reference secrets injected at apply-time (gitea-postgres-secret.sh, .env) instead of hardcoding a live DB password and weather API key in git. Both values must be treated as compromised and rotated by the operator (see .env.example). Also fixes authentik-ingress.yaml and traefik-dashboard-ingress.yaml, which pointed at the internal-ca root ClusterIssuer instead of internal-ca-issuer, the chained issuer every other internal Certificate uses -- causing untrusted-cert warnings on the SSO login and Traefik dashboard. Extends .gitignore for *.retry, .vault_pass*, kubeconfig patterns, and editor swap files. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
11 lines
96 B
Plaintext
11 lines
96 B
Plaintext
.env
|
|
.DS_Store
|
|
tmp/
|
|
old.debian-data
|
|
*.retry
|
|
.vault_pass*
|
|
kubeconfig*
|
|
*.kubeconfig
|
|
*.swp
|
|
*.swo
|
|
*~ |