Replace snakeoil-key with proper secret #87

Closed
opened 2025-01-31 10:17:09 +01:00 by fricklerhandwerk · 2 comments

Currently the pixelfed service definition hardcodes a service secret. Can't deploy it to production that way. Replace it with a managed secret.

implementation notes

c.f.:

Currently the [pixelfed service definition](https://git.fediversity.eu/Fediversity/Fediversity/src/branch/main/services/fediversity/pixelfed.nix) hardcodes a service secret. Can't deploy it to production that way. Replace it with a managed secret. ### implementation notes c.f.: - SelfHostBlocks [SSL contract](https://shb.skarabox.com/contracts-ssl.html) - openbao's [PKI secrets engine](https://openbao.org/docs/secrets/pki/) (needs #493)
Owner

This issue is not only for Pixelfed; all three services share this.

This issue is not only for Pixelfed; all three services share this.
Niols changed title from Pixelfed: Replace snakeoil-key with proper secret to Replace snakeoil-key with proper secret 2025-01-31 14:09:17 +01:00
Owner

Closed in #1009 + #1016.

Closed in #1009 + #1016.
kiara closed this issue 2026-06-06 13:54:30 +02:00
Sign in to join this conversation.
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
fediversity/fediversity#87
No description provided.