Page MenuHomeDevCentral

D3212.id8216.diff
No OneTemporary

D3212.id8216.diff

diff --git a/pillar/paas/alkane/web-001/main.sls b/pillar/paas/alkane/web-001/main.sls
--- a/pillar/paas/alkane/web-001/main.sls
+++ b/pillar/paas/alkane/web-001/main.sls
@@ -164,3 +164,14 @@
- api
- assets
- www
+
+# -------------------------------------------------------------
+# Credentials
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+webserver_content_dotenv:
+ /var/wwwroot/dereckson.be/www/.env:
+ user: web-be-dereckson-www
+ db:
+ service: db-B
+ credentials: dbserver/cluster-B/users/dereckson_www
diff --git a/pillar/paas/alkane/windriver/main.sls b/pillar/paas/alkane/windriver/main.sls
--- a/pillar/paas/alkane/windriver/main.sls
+++ b/pillar/paas/alkane/windriver/main.sls
@@ -119,3 +119,15 @@
- api51
- tools51
- www51
+
+
+# -------------------------------------------------------------
+# Credentials
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+webserver_content_dotenv:
+ /var/wwwroot/dereckson.be/www51/.env:
+ user: web-be-dereckson-www51
+ db:
+ service: db-B
+ credentials: dbserver/cluster-B/users/dereckson_www51
diff --git a/pillar/top.sls b/pillar/top.sls
--- a/pillar/top.sls
+++ b/pillar/top.sls
@@ -61,12 +61,10 @@
web-001:
- saas.mediawiki
- saas.wordpress
- - webserver.credentials
windriver:
- devserver.datacubes
- devserver.ports
- devserver.repos
- webserver.labs
- - webserver.credentials
- webserver.wwwroot51
diff --git a/pillar/webserver/credentials.sls b/pillar/webserver/credentials.sls
deleted file mode 100644
--- a/pillar/webserver/credentials.sls
+++ /dev/null
@@ -1,54 +0,0 @@
-# -------------------------------------------------------------
-# Salt — Sites to provision on the legacy web server
-# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-# Project: Nasqueron
-# License: Trivial work, not eligible to copyright
-# -------------------------------------------------------------
-
-# -------------------------------------------------------------
-# Content of the .env files
-#
-# Those files allow site using DotEnv to read secrets.
-#
-# To ensure secrets can only be read by application user, use:
-#
-# ```
-# user: <php-fpm pool user>
-# ```
-# If your configuration can be read and stored in memory,
-# it's probably best to directly call Vault from the app
-# and only provision Vault AppRole credentials:
-#
-# ```
-# vault: <path to AppRole credential>
-# ```
-#
-# For PHP sites where the configuration file is read every
-# request, it's probably best to cache secrets in file
-# through this mechanism.
-#
-# If you need a database, you can use:
-#
-# ```
-# db:
-# service: entry in nasqueron_services table
-# credentials: path to Vault secret
-#
-# To provision a secret key or other credentials, use:
-#
-# extra_credentials:
-# key: path to vault secret
-#
-# If you need to pass extra plain values use:
-#
-# extra_values:
-# key: value
-# ```
-# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
-webserver_content_dotenv:
- /var/wwwroot/dereckson.be/www/.env:
- user: web-be-dereckson-www
- db:
- service: db-B
- credentials: dbserver/cluster-B/users/dereckson_www

File Metadata

Mime Type
text/plain
Expires
Sat, Nov 23, 18:51 (19 h, 51 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2258697
Default Alt Text
D3212.id8216.diff (3 KB)

Event Timeline