keycloak: map secrets directory instead of per-service mappings

bookwyrm.yaml

@@ -140,5 +140,3 @@ services:
   keycloak:
     volumes:
       - ./bookwyrm/keycloak.sh:/keycloak-setup/bookwyrm.sh:ro
-      - ./data/bookwyrm/secrets:/run/secrets/bookwyrm:ro
-

gitea.yaml

@@ -71,5 +71,4 @@ services:
   # add the gitea client secrets to the keycloak-setup volume
   keycloak:
     volumes:
-      - ./data/gitea/secrets:/run/secrets/gitea:ro
       - ./gitea/keycloak.sh:/keycloak-setup/gitea.sh:ro

grafana.yaml

@@ -39,4 +39,3 @@ services:
   keycloak:
     volumes:
       - ./grafana/keycloak.sh:/keycloak-setup/grafana.sh:ro
-      - ./data/grafana/secrets:/run/secrets/grafana:ro

hedgedoc.yaml

@@ -54,4 +54,3 @@ services:
   keycloak:
     volumes:
       - ./hedgedoc/keycloak.sh:/keycloak-setup/hedgedoc.sh:ro
-      - ./data/hedgedoc/secrets:/run/secrets/hedgedoc:ro

keycloak.yaml

@@ -45,7 +45,7 @@ services:
         - ./keycloak/entrypoint-setup.sh:/setup.sh:ro
         - ./keycloak/mail-setup.sh:/keycloak-setup/mail-setup.sh:ro
         - ./keycloak/mapper-setup.sh:/keycloak-setup/mapper-setup.sh:ro
-        - ./data/keycloak/secrets:/run/secrets/keycloak-secrets:ro
+        - ./secrets:/run/secrets:ro
       depends_on:
         - keycloak-db
 

mastodon.yaml

@@ -203,7 +203,6 @@ services:
   keycloak:
     volumes:
       - ./mastodon/keycloak.sh:/keycloak-setup/mastodon.sh:ro
-      - ./data/mastodon/secrets:/run/secrets/mastodon:ro
 
 #networks:
 #  external_network:

matrix.yaml

@@ -52,4 +52,3 @@ services:
   keycloak:
     volumes:
       - ./matrix/keycloak.sh:/keycloak-setup/matrix.sh:ro
-      - ./data/matrix/secrets:/run/secrets/matrix:ro

mobilizon.yaml

@@ -59,4 +59,3 @@ services:
   keycloak:
     volumes:
       - ./mobilizon/keycloak.sh:/keycloak-setup/mobilizon.sh:ro
-      - ./data/mobilizon/secrets:/run/secrets/mobilizon:ro

nextcloud.yaml

@@ -44,4 +44,3 @@ services:
   keycloak:
     volumes:
       - ./nextcloud/keycloak.sh:/keycloak-setup/nextcloud.sh:ro
-      - ./data/nextcloud/secrets:/run/secrets/nextcloud:ro

pixelfed.yaml

@@ -87,4 +87,3 @@ services:
   keycloak:
     volumes:
       - ./pixelfed/keycloak.sh:/keycloak-setup/pixelfed.sh:ro
-      - ./secrets/pixelfed:/run/secrets/pixelfed:ro

secrets/README

@@ -0,0 +1 @@
+# Do not check in anything in this directory