keycloak: map secrets directory instead of per-service mappings

1 year ago · 4303f7e11a
parent b627e97687
commit 4303f7e11a
11 changed files with 2 additions and 11 deletions
--- a/bookwyrm.yaml
+++ b/bookwyrm.yaml
@ -140,5 +140,3 @@ services:
  keycloak:
    volumes:
      - ./bookwyrm/keycloak.sh:/keycloak-setup/bookwyrm.sh:ro
-      - ./data/bookwyrm/secrets:/run/secrets/bookwyrm:ro
-
--- a/gitea.yaml
+++ b/gitea.yaml
@ -71,5 +71,4 @@ services:
  # add the gitea client secrets to the keycloak-setup volume
  keycloak:
    volumes:
-      - ./data/gitea/secrets:/run/secrets/gitea:ro
      - ./gitea/keycloak.sh:/keycloak-setup/gitea.sh:ro
--- a/grafana.yaml
+++ b/grafana.yaml
@ -39,4 +39,3 @@ services:
  keycloak:
    volumes:
      - ./grafana/keycloak.sh:/keycloak-setup/grafana.sh:ro
-      - ./data/grafana/secrets:/run/secrets/grafana:ro
--- a/hedgedoc.yaml
+++ b/hedgedoc.yaml
@ -54,4 +54,3 @@ services:
  keycloak:
    volumes:
      - ./hedgedoc/keycloak.sh:/keycloak-setup/hedgedoc.sh:ro
-      - ./data/hedgedoc/secrets:/run/secrets/hedgedoc:ro
--- a/keycloak.yaml
+++ b/keycloak.yaml
@ -45,7 +45,7 @@ services:
        - ./keycloak/entrypoint-setup.sh:/setup.sh:ro
        - ./keycloak/mail-setup.sh:/keycloak-setup/mail-setup.sh:ro
        - ./keycloak/mapper-setup.sh:/keycloak-setup/mapper-setup.sh:ro
-        - ./data/keycloak/secrets:/run/secrets/keycloak-secrets:ro
+        - ./secrets:/run/secrets:ro
      depends_on:
        - keycloak-db

--- a/mastodon.yaml
+++ b/mastodon.yaml
@ -203,7 +203,6 @@ services:
  keycloak:
    volumes:
      - ./mastodon/keycloak.sh:/keycloak-setup/mastodon.sh:ro
-      - ./data/mastodon/secrets:/run/secrets/mastodon:ro

 #networks:
 #  external_network:
--- a/matrix.yaml
+++ b/matrix.yaml
@ -52,4 +52,3 @@ services:
  keycloak:
    volumes:
      - ./matrix/keycloak.sh:/keycloak-setup/matrix.sh:ro
-      - ./data/matrix/secrets:/run/secrets/matrix:ro
--- a/mobilizon.yaml
+++ b/mobilizon.yaml
@ -59,4 +59,3 @@ services:
  keycloak:
    volumes:
      - ./mobilizon/keycloak.sh:/keycloak-setup/mobilizon.sh:ro
-      - ./data/mobilizon/secrets:/run/secrets/mobilizon:ro
--- a/nextcloud.yaml
+++ b/nextcloud.yaml
@ -44,4 +44,3 @@ services:
  keycloak:
    volumes:
      - ./nextcloud/keycloak.sh:/keycloak-setup/nextcloud.sh:ro
-      - ./data/nextcloud/secrets:/run/secrets/nextcloud:ro
--- a/pixelfed.yaml
+++ b/pixelfed.yaml
@ -87,4 +87,3 @@ services:
  keycloak:
    volumes:
      - ./pixelfed/keycloak.sh:/keycloak-setup/pixelfed.sh:ro
-      - ./secrets/pixelfed:/run/secrets/pixelfed:ro
--- a/secrets/README
+++ b/secrets/README
@ -0,0 +1 @@
+# Do not check in anything in this directory
				`@ -0,0 +1 @@`
				`# Do not check in anything in this directory`