hydrobuddy/secrets
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ops: add Caddyfile + landing + DB url

Browse source
This commit is contained in:
Claude 2026-05-30 22:05:11 +02:00
parent 7e583d262b
commit bbcd8ffe41
4 changed files with 128 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
passwords.md
View file

@ -51,7 +51,8 @@ _Last updated: 2026-05-30 (new-VPS bring-up)._
- Uses: nightly encrypted `pg_dump` backups → R2; later image uploads (presigned URLs).
## App secrets — to generate fresh on the new box (do NOT reuse old)
- `DATABASE_URL` (TimescaleDB role + password) — _TODO_
- **`DATABASE_URL`** = `postgres://hbcloud:095bb2ad7b25355592243d10c46e1e39cc15129cd71c5d53@127.0.0.1:5432/cannabuddy`
(also in `/etc/cannabuddy/cloud.env` on the box, root 0600; TimescaleDB 2.27.1 ext enabled)
- Better-Auth secret (`BETTER_AUTH_SECRET`) — _TODO (openssl rand -hex 32)_
- NanoMQ ↔ cloud auth-hook shared secret / device-token signing — _TODO_
- Forgejo: admin creds + CI runner registration token + deploy SSH key — _TODO_