mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5
ef5ea7cb55
meta/schema.yml held credential definitions and their runtime values, but the name said 'schema' and read like structural metadata next to services.yml and volumes.yml. Nothing in the file is a schema in the sense the other meta files use the word, and a contributor had to open it to learn it holds secrets. 62 role files renamed. ROLE_FILE_META_SCHEMA becomes ROLE_FILE_META_SECRETS and keeps its role as the SPOT the path is built from. Two readers bypassed that constant and spelled the name themselves: utils/cache/applications.py built meta_dir / 'schema.yml' twice, and plugins/lookup/application_gid.py carries the filename in the marker list it detects application roles by. Left behind, the rename would not have raised — credentials would have resolved empty and the role would have stopped counting as an application. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
31 lines
1.1 KiB
YAML
31 lines
1.1 KiB
YAML
---
|
|
credentials:
|
|
secret_key_base:
|
|
description: Main secret key used to verify the integrity of signed cookies and tokens
|
|
algorithm: sha256
|
|
validation: ^[a-f0-9]{64}$
|
|
otp_secret:
|
|
description: OTP secret used for two-factor authentication
|
|
algorithm: sha256
|
|
validation: ^[a-f0-9]{64}$
|
|
vapid_private_key:
|
|
description: Private VAPID key used for web push notifications
|
|
algorithm: vapid_private
|
|
validation: ^[-_a-zA-Z0-9]{30,}$
|
|
vapid_public_key:
|
|
description: Public VAPID key used for web push notifications
|
|
algorithm: vapid_public
|
|
validation: ^[-_a-zA-Z0-9]{30,}$
|
|
active_record_encryption_deterministic_key:
|
|
description: Deterministic encryption key for Active Record encryption
|
|
algorithm: sha256
|
|
validation: ^[a-f0-9]{64}$
|
|
active_record_encryption_key_derivation_salt:
|
|
description: Key derivation salt for Active Record encryption
|
|
algorithm: sha256
|
|
validation: ^[a-f0-9]{64}$
|
|
active_record_encryption_primary_key:
|
|
description: Primary encryption key for Active Record encrypted columns
|
|
algorithm: sha256
|
|
validation: ^[a-f0-9]{64}$
|