feat(secrets): add the rakazo database and app secrets #25

Merged

marti merged 1 commit from feature/rakazo-secrets into main 2026-10-22 23:53:06 +02:00

Conversation 0 Commits 1 Files changed 1 +9 -2

marti commented 2026-10-22 23:51:51 +02:00

Owner

• Copy link
• Copy Markdown

Adds the sops secrets the rakazo deployment from #24 reads. Without them, sops-nix fails activation on cum-services and cum-tools.

• postgres/rakazo: password for the rakazo database owner
• rakazo/app_db_password: password for the rakazo_app login, which rakazo creates itself
• rakazo/better_auth_secret, rakazo/screen_proxy_secret, rakazo/supervisor_token, rakazo/encryption_key

All values are random hex from openssl rand -hex. Back up rakazo/encryption_key somewhere off the server: nothing rakazo encrypts can be read without it.

Deploy cum-services first, then cum-tools.

🤖 Generated with Claude Code

Adds the sops secrets the rakazo deployment from #24 reads. Without them, sops-nix fails activation on cum-services and cum-tools. - `postgres/rakazo`: password for the rakazo database owner - `rakazo/app_db_password`: password for the rakazo_app login, which rakazo creates itself - `rakazo/better_auth_secret`, `rakazo/screen_proxy_secret`, `rakazo/supervisor_token`, `rakazo/encryption_key` All values are random hex from `openssl rand -hex`. Back up `rakazo/encryption_key` somewhere off the server: nothing rakazo encrypts can be read without it. Deploy cum-services first, then cum-tools. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

marti added 1 commit 2026-10-22 23:51:51 +02:00

feat(secrets): add the rakazo database and app secrets ... 13223f5e66

- postgres/rakazo for the database owner on cum-services
- rakazo/* for the app login, auth, screen proxy, supervisor token and encryption key

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

marti merged commit 2215e46692 into main 2026-10-22 23:53:06 +02:00

marti referenced this pull request from a commit 2026-10-22 23:53:07 +02:00

Merge pull request 'feat(secrets): add the rakazo database and app secrets' (#25) from feature/rakazo-secrets into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

cumsek/nix!25

No description provided.