Files
computer-playbook/roles/web-app-jitsi/meta/secrets.yml
kevinveenbirkenbachandClaude Opus 5 ef5ea7cb55 refactor(roles): name the credential file meta/secrets.yml
meta/schema.yml held credential definitions and their runtime values, but the
name said 'schema' and read like structural metadata next to services.yml and
volumes.yml. Nothing in the file is a schema in the sense the other meta files
use the word, and a contributor had to open it to learn it holds secrets.

62 role files renamed. ROLE_FILE_META_SCHEMA becomes ROLE_FILE_META_SECRETS and
keeps its role as the SPOT the path is built from.

Two readers bypassed that constant and spelled the name themselves:
utils/cache/applications.py built meta_dir / 'schema.yml' twice, and
plugins/lookup/application_gid.py carries the filename in the marker list it
detects application roles by. Left behind, the rename would not have raised —
credentials would have resolved empty and the role would have stopped counting
as an application.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-12 12:08:06 +02:00

33 lines
1.2 KiB
YAML

---
credentials:
jicofo_component_secret:
description: "Prosody component secret for jicofo's auth connection (`focus.<XMPP_DOMAIN>`)."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48
jicofo_auth_password:
description: "XMPP password for jicofo's authenticated user account."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48
jvb_auth_password:
description: "XMPP password for jvb's authenticated user account in the brewery MUC."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48
jigasi_xmpp_password:
description: "XMPP password for jigasi (SIP gateway) — reserved even when jigasi is disabled."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48
jibri_recorder_password:
description: "XMPP password for jibri (recorder) — reserved even when jibri is disabled."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48
jibri_xmpp_password:
description: "Secondary jibri XMPP password — reserved even when jibri is disabled."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 48