kevinveenbirkenbach/computer-playbook
1
0 Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-06 10:59:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,682 Commits 9 Branches 78 Tags
fix/dev-python/python-upper-bound
Commit Graph
4 Commits
Author SHA1 Message Date
kevinveenbirkenbach f067166095 refactor(secrets): centralize infinito secrets paths and remove role-local csv vars 
- introduce global PATH_INFINITO_* secrets paths in group_vars
- replace BKP_DOCKER_2_LOC_DATABASES_CSV with PATH_INFINITO_DATABASE_SECRETS
- align sys-ctl-bkp-docker-2-loc and sys-token-store to shared secrets layout
- remove role-local defaults in favor of global path definitions
- drop outdated Nextcloud backup recovery docs

https://chatgpt.com/share/695132e1-1768-800f-b7e6-b72927f14b81
 2025-12-28 14:38:25 +01:00
kevinveenbirkenbach 01f87b029e Removed unused SYS_TOKEN_STORE_DEFAULT_TOKEN_LENGTH 2025-12-28 10:21:07 +01:00
kevinveenbirkenbach fadde240d8 refactor(tokens): unify token handling via sys-token-store 
- Introduce sys-token-store lookup.yml (users → store → empty)
- Introduce sys-token-store write.yml (persist + inject into runtime users)
- Remove all implicit token generation and legacy token tasks
- Migrate Matomo to users.<user>.tokens[application_id]
- Remove redundant Matomo token.value and credentials schema
- Fix Matomo bootstrap env: use MATOMO_ADMIN_USER consistently
- Harden Matomo site verification error handling
- Align sys-front-inj-matomo with unified token model

https://chatgpt.com/share/694d7d55-28a0-800f-8c91-cd09cb9ded7f
 2025-12-25 19:07:08 +01:00
kevinveenbirkenbach d3c9380e6b feat(sys-token-store): introduce centralized per-user token store 
Add new sys-token-store role to manage per-user, per-app tokens in a single
on-host YAML store.

- Store tokens under /var/lib/infinito/secrets/tokens.yml
- Map users to multiple app tokens (users → tokens → app)
- Ensure secure directories and file permissions
- Load and persist token store server-side (slurp + copy)
- Idempotent token creation and merging
- Generate tokens when missing
- Export resolved token for downstream roles

Constants are defined uppercase, runtime variables lowercase.

https://chatgpt.com/share/694bb78b-45e4-800f-879c-82c11a1b8d0b
 2025-12-24 10:50:58 +01:00