Complete Traefik infrastructure deployment - 60% complete
Major accomplishments: - ✅ SELinux policy installed and working - ✅ Core Traefik v2.10 deployment running - ✅ Production configuration ready (v3.1) - ✅ Monitoring stack configured - ✅ Comprehensive documentation created - ✅ Security hardening implemented Current status: - 🟡 Partially deployed (60% complete) - ⚠️ Docker socket access needs resolution - ❌ Monitoring stack not deployed yet - ⚠️ Production migration pending Next steps: 1. Fix Docker socket permissions 2. Deploy monitoring stack 3. Migrate to production config 4. Validate full functionality Files added: - Complete Traefik deployment documentation - Production and test configurations - Monitoring stack configurations - SELinux policy module - Security checklists and guides - Current status documentation
This commit is contained in:
44
secrets/docker-secrets-mapping.yaml
Normal file
44
secrets/docker-secrets-mapping.yaml
Normal file
@@ -0,0 +1,44 @@
|
||||
# Docker Secrets Mapping
|
||||
# Maps environment variables to Docker secrets
|
||||
|
||||
secrets_mapping:
|
||||
postgresql:
|
||||
POSTGRES_PASSWORD: pg_root_password
|
||||
POSTGRES_DB_PASSWORD: pg_root_password
|
||||
|
||||
mariadb:
|
||||
MYSQL_ROOT_PASSWORD: mariadb_root_password
|
||||
MARIADB_ROOT_PASSWORD: mariadb_root_password
|
||||
|
||||
redis:
|
||||
REDIS_PASSWORD: redis_password
|
||||
|
||||
nextcloud:
|
||||
MYSQL_PASSWORD: nextcloud_db_password
|
||||
NEXTCLOUD_ADMIN_PASSWORD: nextcloud_admin_password
|
||||
|
||||
immich:
|
||||
DB_PASSWORD: immich_db_password
|
||||
|
||||
paperless:
|
||||
PAPERLESS_SECRET_KEY: paperless_secret_key
|
||||
|
||||
vaultwarden:
|
||||
ADMIN_TOKEN: vaultwarden_admin_token
|
||||
|
||||
homeassistant:
|
||||
SUPERVISOR_TOKEN: ha_api_token
|
||||
|
||||
grafana:
|
||||
GF_SECURITY_ADMIN_PASSWORD: grafana_admin_password
|
||||
|
||||
jellyfin:
|
||||
JELLYFIN_API_KEY: jellyfin_api_key
|
||||
|
||||
gitea:
|
||||
GITEA__security__SECRET_KEY: gitea_secret_key
|
||||
|
||||
# File secrets (certificates, keys)
|
||||
file_secrets:
|
||||
tls_certificate: /run/secrets/tls_certificate
|
||||
tls_private_key: /run/secrets/tls_private_key
|
||||
Reference in New Issue
Block a user