2026-02-18 17:15:31 -07:00

64 lines
1.6 KiB
YAML

---
# EXAMPLE — Replace with real values, then encrypt with:
# ansible-vault encrypt inventory/host_vars/example-instance/vault.yml
#
# Or generate all secrets automatically:
# ./scripts/bootstrap-vault.sh example-instance
# --- Database ---
vault_cml_v2_postgres_password: "GENERATE_ME"
# --- Redis ---
vault_cml_redis_password: "GENERATE_ME"
# --- JWT & Encryption ---
vault_cml_jwt_access_secret: "GENERATE_ME"
vault_cml_jwt_refresh_secret: "GENERATE_ME"
vault_cml_encryption_key: "GENERATE_ME"
# --- Admin ---
vault_cml_initial_admin_email: "admin@example.org"
vault_cml_initial_admin_password: "GENERATE_ME"
# --- Listmonk ---
vault_cml_listmonk_db_password: "GENERATE_ME"
vault_cml_listmonk_web_admin_password: "GENERATE_ME"
vault_cml_listmonk_api_token: "GENERATE_ME"
# --- NocoDB ---
vault_cml_nocodb_admin_password: "GENERATE_ME"
# --- Gitea ---
vault_cml_gitea_db_passwd: "GENERATE_ME"
vault_cml_gitea_db_root_password: "GENERATE_ME"
# --- n8n ---
vault_cml_n8n_encryption_key: "GENERATE_ME"
vault_cml_n8n_user_password: "GENERATE_ME"
# --- Monitoring ---
vault_cml_grafana_admin_password: "GENERATE_ME"
vault_cml_gotify_admin_password: "GENERATE_ME"
# --- Vaultwarden ---
vault_cml_vaultwarden_admin_token: "GENERATE_ME"
# --- Rocket.Chat ---
vault_cml_rocketchat_admin_password: "GENERATE_ME"
# --- Gancio ---
vault_cml_gancio_admin_password: "GENERATE_ME"
# --- SMTP ---
vault_cml_smtp_pass: ""
# --- Pangolin ---
vault_cml_pangolin_api_key: ""
vault_cml_pangolin_newt_id: ""
vault_cml_pangolin_newt_secret: ""
vault_cml_pangolin_site_id: ""
vault_cml_pangolin_endpoint: ""
# --- Bunker Ops ---
vault_bunker_ops_remote_write_token: ""