hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

configs/paivana: add secret path docs and token example

Browse source
This commit is contained in:
Hernâni Marques 2026-07-13 11:14:22 +02:00
parent 7f769aaf8f
commit ea6520d2a3
3 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
SECRETS.md
View file

@ -21,6 +21,7 @@ Live passwords/keys live in sibling **`koopa-admin-secrets`**.
| Bonfire (`FEDERATE=true`) | `koopa/home-hernani/koopa-bonfire/{.env,users.env,compose.yml}` | `~/koopa-bonfire/` |
| Prime (Jellyfin + qBittorrent) | `koopa/home-hernani/koopa-prime/{.env,users.env}` | `~/koopa-prime/` |
| Forgejo (**rootless**, git.hacktivism.ch) | `koopa/home-hernani/koopa-forgejo/{.env,users.env,compose.yml}` | `~/koopa-forgejo/` |
| Paivana (GOA paywall) | `koopa/home-hernani/koopa-paivana/secrets/*` | `~/koopa-paivana/secrets/` |
## Rules

13
configs/paivana/secrets/README.md Normal file
View file

@ -0,0 +1,13 @@
# Secrets — not stored in admin-log
Live on koopa (`hernani`):
```
~/koopa-paivana/secrets/merchant-access-token # secret-token:<goa-shop password>
~/koopa-paivana/secrets/paivana-secret # openssl rand -hex 32
```
Mode: world-readable to the container user is required under rootless podman
(`chmod 644` is fine; directory stays under hernani home).
Optional mirror under `koopa-admin-secrets/koopa/home-hernani/koopa-paivana/secrets/`.

1
configs/paivana/secrets/merchant-access-token.example Normal file
View file

@ -0,0 +1 @@
secret-token:REPLACE-WITH-GOA-SHOP-INSTANCE-PASSWORD