From a8c8ac3e1e298fd7844075ab33c29ee67e320dc7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Simon=20B=C3=A4rlocher?= Date: Thu, 2 Jul 2026 17:22:08 +0200 Subject: [PATCH] fix(bao-seed): seed proxy_outpost_token, garage and nextcloud secrets MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The seed script only generated authentik LDAP, opnform, homarr and bookstack secrets. Proxy outposts, garage and nextcloud were never seeded, so a fresh demo mount was missing garage/*, nextcloud/* and authentik/proxy_outpost_token — the proxy outpost then failed to authenticate (403) and garage/nextcloud roles aborted on missing vault keys. Add the three blocks; merge semantics keep existing keys. --- scripts/bao-seed.sh | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/scripts/bao-seed.sh b/scripts/bao-seed.sh index 80945b7..dc59711 100755 --- a/scripts/bao-seed.sh +++ b/scripts/bao-seed.sh @@ -154,12 +154,27 @@ ensure_key authentik secret_key gen_hex64 ensure_key authentik postgres_password gen_pass ensure_key authentik admin_password gen_pass ensure_key authentik ldap_outpost_token gen_hex32 +ensure_key authentik proxy_outpost_token gen_hex32 ensure_key authentik nextcloud_oidc_secret gen_hex32 ensure_key authentik opnform_oidc_secret gen_hex32 ensure_key authentik homarr_oidc_secret gen_hex32 ensure_key authentik bookstack_oidc_secret gen_hex32 write_secret authentik +echo "-> nextcloud" +read_secret nextcloud +ensure_key nextcloud postgres_password gen_long_pass +ensure_key nextcloud admin_password gen_pass +write_secret nextcloud + +echo "-> garage" +read_secret garage +ensure_key garage rpc_secret gen_hex32 +ensure_key garage admin_token gen_hex32 +ensure_key garage metrics_token gen_hex32 +ensure_key garage webui_password gen_pass +write_secret garage + echo "-> opnform" read_secret opnform ensure_key opnform app_key gen_app_key