Files
Flux-CD-Test/apps/overlays/hexm-0001/secrets.yaml
T
2026-08-11 16:06:22 +03:00

93 lines
2.2 KiB
YAML

# ============================================================
# Node-specific secrets for hexm-0001
#
# These MUST be encrypted with SOPS before committing to Git.
# Encrypt: sops --encrypt --in-place secrets.yaml
# Decrypt: sops --decrypt secrets.yaml | kubectl apply -f -
#
# Alternatively, create imperatively and skip committing this file:
# kubectl create secret generic global-env \
# --from-literal=SIGNALYTIC_NODE_ID=HEXM0001 \
# --from-literal=SIGNALYTIC_FACILITY_NAME="Facility Name Here" \
# -n epcare
# ============================================================
---
apiVersion: v1
kind: Secret
metadata:
name: global-env
namespace: epcare
type: Opaque
stringData:
SIGNALYTIC_NODE_ID: "HEXM0001"
SIGNALYTIC_FACILITY_NAME: "HOPE CLINIC LUKULI"
---
apiVersion: v1
kind: Secret
metadata:
name: cals-env
namespace: epcare
type: Opaque
stringData:
CALS_REMOTE_HOST: "REPLACE_WITH_REMOTE_HOST"
CALS_REMOTE_PATH: /home/cals/logs/HEXM0001
CALS_REMOTE_USER: cals
CALS_SSH_KEY_PATH: /root/.ssh/id_ed25519
CALS_TZ: UTC
CALS_SCHEDULE: "*/2 * * * *"
CALS_OPTIONS: -avz --delete
CALS_RETENTION_DAYS: "30"
---
apiVersion: v1
kind: Secret
metadata:
name: cals-ssh-key
namespace: epcare
type: Opaque
stringData:
id_ed25519: |
-----BEGIN OPENSSH PRIVATE KEY-----
REPLACE_WITH_ACTUAL_PRIVATE_KEY_FOR_HEXM0001
-----END OPENSSH PRIVATE KEY-----
---
apiVersion: v1
kind: Secret
metadata:
name: db-env
namespace: epcare
type: Opaque
stringData:
OMRS_DB_USER: "openmrs"
OMRS_DB_PASSWORD: "password"
MYSQL_DATABASE: openmrs
MYSQL_USER: openmrs
MYSQL_PASSWORD: "password"
MYSQL_ROOT_PASSWORD: "password"
---
apiVersion: v1
kind: Secret
metadata:
name: backend-env
namespace: epcare
type: Opaque
stringData:
OMRS_CONFIG_MODULE_WEB_ADMIN: "true"
OMRS_CONFIG_AUTO_UPDATE_DATABASE: "true"
OMRS_CONFIG_CREATE_TABLES: "false"
OMRS_CONFIG_CONNECTION_SERVER: db
OMRS_CONFIG_CONNECTION_DATABASE: openmrs
OMRS_CONFIG_CONNECTION_USERNAME: openmrs
OMRS_CONFIG_CONNECTION_PASSWORD: "openmrs"
---
apiVersion: v1
kind: Secret
metadata:
name: frontend-env
namespace: epcare
type: Opaque
stringData:
SPA_PATH: /openmrs/spa
API_URL: /openmrs
SPA_CONFIG_URLS: /openmrs/spa/config-core_demo.json
SPA_DEFAULT_LOCALE: ""