Added quotes.

This commit is contained in:
Raphaël Billet
2025-11-26 22:24:57 +01:00
parent d4c2de55f3
commit 663c257067
3 changed files with 18 additions and 16 deletions
+1
View File
@@ -0,0 +1 @@
deploy.conf
+2 -1
View File
@@ -1,4 +1,5 @@
agents/
ai-production/
extra-files/
test.sh
test.sh
deploy.conf
+15 -15
View File
@@ -174,21 +174,21 @@ files_generation() {
envsubst < config-files/sops-nix/.sops.yaml > extra-files/etc/nixos/.sops.yaml
echo -e "\n\n ✅ Generating secure random database passwords..."
HOME_ASSISTANT_MQTT_USER=$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)
HOME_ASSISTANT_MQTT_PASSWORD=$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)
PASSBOLT_MYSQL_DATABASE=$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)
PASSBOLT_MYSQL_USER=$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)
PASSBOLT_MYSQL_PASSWORD=$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)
FTLCONF_WEBSERVER_PASSWORD=$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)
DATA-DISK-1=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
DATA-DISK-2=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
DATA-DISK-3=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
DATA-DISK-4=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
DATA-DISK-5=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
DATA-DISK-6=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
PARITY-DISK-1=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
PARITY-DISK-2=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
PARITY-DISK-3=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256)
HOME_ASSISTANT_MQTT_USER="$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)"
HOME_ASSISTANT_MQTT_PASSWORD="$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)"
PASSBOLT_MYSQL_DATABASE="$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)"
PASSBOLT_MYSQL_USER="$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)"
PASSBOLT_MYSQL_PASSWORD="$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)"
FTLCONF_WEBSERVER_PASSWORD="$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)"
DATA-DISK-1="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
DATA-DISK-2="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
DATA-DISK-3="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
DATA-DISK-4="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
DATA-DISK-5="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
DATA-DISK-6="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
PARITY-DISK-1="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
PARITY-DISK-2="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
PARITY-DISK-3="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)"
echo -e "\n\n ✅ Encrypting secrets in the correct file..."
envsubst < "config-files/sops-nix/secrets.yaml" | sops encrypt --filename-override secrets.yaml \