mirror of
https://github.com/terraphim/gitea-infrastructure.git
synced 2026-07-16 00:00:32 +02:00
security: redact credentials and remove corporate hostname/vault references
- README: replace zesticai-non-prod vault name and bigbox hostname with generic placeholders; replace hardcoded Tailscale IP with descriptive text - deploy-to-bigbox.sh: make BIGBOX and TAILSCALE_IP configurable via env vars (auto-detect via tailscale ip -4); replace op_zesticai_non_prod.sh with op_credentials.sh - Caddyfile: remove bigbox hostname from comment - RESEARCH doc: remove hardcoded S3 access key and secret key values from the secrets table; replace with generic op:// reference format - docker-compose_kitchen_sink.yml: replace hardcoded S3 credentials with CHANGE_ME placeholders Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -20,8 +20,8 @@ services:
|
||||
- GITEA__repository__LFS_START_SERVER=true
|
||||
- GITEA__repository__LFS_CONTENT_PATH=/data/lfs
|
||||
- GITEA__storage__type=minio
|
||||
- GITEA__storage__MINIO_ACCESS_KEY_ID=REDACTED_S3_ACCESS_KEY
|
||||
- GITEA__storage__MINIO_SECRET_ACCESS_KEY=REDACTED_S3_SECRET_KEY
|
||||
- GITEA__storage__MINIO_ACCESS_KEY_ID=CHANGE_ME_S3_ACCESS_KEY
|
||||
- GITEA__storage__MINIO_SECRET_ACCESS_KEY=CHANGE_ME_S3_SECRET_KEY
|
||||
- GITEA__storage__MINIO_BUCKET=gitea
|
||||
- GITEA__storage__MINIO_LOCATION=us-east-1
|
||||
- GITEA__storage__MINIO_ENDPOINT=http://s3:8333
|
||||
@@ -120,8 +120,8 @@ services:
|
||||
restart: on-failure
|
||||
environment:
|
||||
S3_BUCKET_NAME: gitea
|
||||
AWS_ACCESS_KEY_ID: "REDACTED_S3_ACCESS_KEY"
|
||||
AWS_SECRET_ACCESS_KEY: "REDACTED_S3_SECRET_KEY"
|
||||
AWS_ACCESS_KEY_ID: "CHANGE_ME_S3_ACCESS_KEY"
|
||||
AWS_SECRET_ACCESS_KEY: "CHANGE_ME_S3_SECRET_KEY"
|
||||
AWS_SIGS_VERSION: 4
|
||||
S3_SERVER: s3
|
||||
S3_SERVER_PORT: 8333
|
||||
|
||||
Reference in New Issue
Block a user