mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 12:03:59 +00:00
bcc8f23a0d
- Secret Management: Integrated AESGCM for temporary secret handling in install.py and enhanced OpenBao (Vault) support with namespace injection and additional secret paths (Grafana, Kerberos, TDE).
- Infrastructure & K8s:
- Added Barman Object Store backup configuration (S3) to prole-db.yaml.
- Updated Prometheus deployment with PVC and persistent configuration.
- Updated k3s cluster/registry creation scripts.
- Added etc/build-a-bao.sh for OpenBao setup.
- MSSQL Integration: Updated docker scripts and k8s deployments for Prole MSSQL database.
- Documentation: Added docs/PROLE-CFG-SECRETS.md explaining the new secret handling.
- General: Refined initialization scripts (init_authority.sh, init_openbao.sh, etc.) and updated the ncurses installer.
24 lines
829 B
Bash
Executable File
24 lines
829 B
Bash
Executable File
#!/bin/bash
|
|
|
|
PROLE_HOME=~/dev/prole
|
|
|
|
if [[ -z "${POSTGRES_PASSWORD:-}" ]]; then
|
|
echo "ERROR: POSTGRES_PASSWORD is required. Store it in OpenBao (kv/prole/<namespace>/db#password) or export it." >&2
|
|
exit 1
|
|
fi
|
|
|
|
PG_VERSION=$(cat "$PROLE_HOME/conf/postgresql/.version" 2>/dev/null | tr -d '[:space:]')
|
|
RELEASE=$(cat "$PROLE_HOME/prole-db/.version" 2>/dev/null | tr -d '[:space:]')
|
|
if [[ "$RELEASE" =~ ^[0-9]+$ ]]; then RELEASE=$(printf "%03d" "$RELEASE"); fi
|
|
IMAGE="prole-db:${PG_VERSION:-17.7}-${RELEASE:-043}"
|
|
|
|
docker run --rm -it -u root \
|
|
--hostname=prole-db-00n \
|
|
-e POSTGRES_PASSWORD="$POSTGRES_PASSWORD" \
|
|
--env=PATH=/usr/lib/postgresql/17/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \
|
|
--volume=/Users/chrisfu/dev/prole/data:/data \
|
|
--network=bridge \
|
|
--entrypoint bash \
|
|
--restart=no \
|
|
$IMAGE
|