mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 18:54:32 +00:00
bcc8f23a0d
- Secret Management: Integrated AESGCM for temporary secret handling in install.py and enhanced OpenBao (Vault) support with namespace injection and additional secret paths (Grafana, Kerberos, TDE).
- Infrastructure & K8s:
- Added Barman Object Store backup configuration (S3) to prole-db.yaml.
- Updated Prometheus deployment with PVC and persistent configuration.
- Updated k3s cluster/registry creation scripts.
- Added etc/build-a-bao.sh for OpenBao setup.
- MSSQL Integration: Updated docker scripts and k8s deployments for Prole MSSQL database.
- Documentation: Added docs/PROLE-CFG-SECRETS.md explaining the new secret handling.
- General: Refined initialization scripts (init_authority.sh, init_openbao.sh, etc.) and updated the ncurses installer.
15 lines
602 B
Bash
Executable File
15 lines
602 B
Bash
Executable File
# export MSSQL_SA_PASSWORD=$(openssl rand -base64 32)
|
|
if [[ -z "${MSSQL_SA_PASSWORD:-}" ]]; then
|
|
echo "ERROR: MSSQL_SA_PASSWORD is required. Store it in OpenBao (kv/prole/<namespace>/mssql#sa_password) or export it." >&2
|
|
exit 1
|
|
fi
|
|
|
|
DOCKER_DEFAULT_PLATFORM=linux/amd64 docker run --rm -it \
|
|
--hostname=prole-mssql-db001 -p 1433:1433 \
|
|
-e "ACCEPT_EULA=Y" -e "MSSQL_SA_PASSWORD=$MSSQL_SA_PASSWORD" \
|
|
--env=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \
|
|
--volume=/Users/chrisfu/dev/prole/mssql/data:/var/opt/mssql/data \
|
|
--entrypoint bash \
|
|
--restart=no \
|
|
prole-mssql-db:016
|