diff --git a/.geminiignore b/.geminiignore new file mode 100644 index 0000000..b1b6858 --- /dev/null +++ b/.geminiignore @@ -0,0 +1 @@ +deploy.conf \ No newline at end of file diff --git a/.gitignore b/.gitignore index 5cd9696..d6eb3b0 100644 --- a/.gitignore +++ b/.gitignore @@ -1,4 +1,5 @@ agents/ ai-production/ extra-files/ -test.sh \ No newline at end of file +test.sh +deploy.conf \ No newline at end of file diff --git a/deploy.sh b/deploy.sh index 190b568..017159a 100755 --- a/deploy.sh +++ b/deploy.sh @@ -174,21 +174,21 @@ files_generation() { envsubst < config-files/sops-nix/.sops.yaml > extra-files/etc/nixos/.sops.yaml echo -e "\n\n ✅ Generating secure random database passwords..." - HOME_ASSISTANT_MQTT_USER=$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10) - HOME_ASSISTANT_MQTT_PASSWORD=$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64) - PASSBOLT_MYSQL_DATABASE=$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10) - PASSBOLT_MYSQL_USER=$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10) - PASSBOLT_MYSQL_PASSWORD=$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64) - FTLCONF_WEBSERVER_PASSWORD=$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64) - DATA-DISK-1=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) - DATA-DISK-2=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) - DATA-DISK-3=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) - DATA-DISK-4=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) - DATA-DISK-5=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) - DATA-DISK-6=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) - PARITY-DISK-1=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) - PARITY-DISK-2=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) - PARITY-DISK-3=$(openssl rand -base64 300 | tr -d "=+/" | cut -c1-256) + HOME_ASSISTANT_MQTT_USER="$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)" + HOME_ASSISTANT_MQTT_PASSWORD="$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)" + PASSBOLT_MYSQL_DATABASE="$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)" + PASSBOLT_MYSQL_USER="$(openssl rand -base64 29 | tr -d "123456789=+/" | cut -c1-10)" + PASSBOLT_MYSQL_PASSWORD="$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)" + FTLCONF_WEBSERVER_PASSWORD="$(openssl rand -base64 29 | tr -d "=+/" | cut -c1-64)" + DATA-DISK-1="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" + DATA-DISK-2="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" + DATA-DISK-3="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" + DATA-DISK-4="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" + DATA-DISK-5="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" + DATA-DISK-6="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" + PARITY-DISK-1="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" + PARITY-DISK-2="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" + PARITY-DISK-3="$(openssl rand -base64 128 | tr -d "=+/" | cut -c1-128)" echo -e "\n\n ✅ Encrypting secrets in the correct file..." envsubst < "config-files/sops-nix/secrets.yaml" | sops encrypt --filename-override secrets.yaml \