Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/minio.env

25 lines
5 KiB
Bash
Raw Normal View History

Add minio module for S3-compatible object storage Label Studio _really_ prefers using a direct object storage model. Can't say I blame them, it makes sense given they are running Python. I had to bump Authentik to not use its default port so that minio could use its own default port. That seemed safest given that Authentik is always proxied but minio/S3 may _not_ be. I'm just not sure.
2025-10-01 19:25:29 +00:00
MINIO_BROWSER_REDIRECT_URL=ENC[AES256_GCM,data:C2FUvvKDYBs8T8awUjGxcOmbi0YW1nZaF20g5/fF,iv:G0lGNVCimUYKScGU8wA36gJcAkVIJAOIB2f1xvQBZr8=,tag:FRzKstCYW/RHa/6LJzBxyw==,type:str]
MINIO_ROOT_USER=ENC[AES256_GCM,data:FWHZVWGWMY4NEd/lp6FNuy1VQ38SnIR288q3oZ7mrvb0AXc2,iv:hI4kZM/JlOK6qGE4Xi29Vrjaudk53b0v/wOd9EKgx6k=,tag:H8gopq1obn5Y0fPNreFU8w==,type:str]
MINIO_ROOT_PASSWORD=ENC[AES256_GCM,data:c+TiLy6KE7MpMQ2DXgPB41BIJqwpHsj/k8QbdUOP3KVQ2gET,iv:e2BJMKjUeKeWOlWL8yg/gTijmf7a0OF0Hu75tUQ8/K4=,tag:jENZIAh3wi3/SQDPv8Gi/A==,type:str]
MINIO_IDENTITY_OPENID_CONFIG_URL=ENC[AES256_GCM,data:0jgUN5XUzbpl+doSbVSnMXpoJtJy4CXvTJ864bCksTTHKciGcWMIDoK/xBDjcjPQ9Ny3M6RyOhouLOp7Zz4SIVKbqJQj5eGHKTBu2LSlnZx4gg==,iv:QJQDfqWYcupF14qE4mXmE2L13njpjgh5SSDbcS+gxto=,tag:QP5RVKF3JTDwPblBfPIElA==,type:str]
MINIO_IDENTITY_OPENID_CLIENT_ID=ENC[AES256_GCM,data:2dDnsk5pr/YZVLO6MeO+N1mOdFMUZaYhtNUtBM4bg51ysIEwRWEIZA==,iv:oWeGcXVxrZ5wqdCp5/BAdm4DlWZOf9kH6FhjE3wpZew=,tag:f3J5EH+RgXAA2TmO+UArCg==,type:str]
MINIO_IDENTITY_OPENID_CLIENT_SECRET=ENC[AES256_GCM,data:20wnwfCA+eeMyQl4kZbTqYjixIsAQ9qjNLZXqJaOuI75CrhU/T/DZ+sR8O+yLCB6twyShbvYLPz/uLjyh7V5b+ypkS+Ql4o9uZ2h1xHhtk9MwkyJkTF3SnEDI9ehUvgmkWvPy7SB/q48W5U22Ujx3MwLcDM8Kh7+5PLF3GQDi2M=,iv:p6JXHkjNxuLPRaxS91rspwlLNxxPPBHlT/AXxK3fsVg=,tag:goWn/hsSQzx5QHaBPG8vdg==,type:str]
MINIO_IDENTITY_OPENID_DISPLAY_NAME=ENC[AES256_GCM,data:VeWvfk89zYiaoPD6Cm299luW,iv:R99ylbdgizL0CFWtKaPisOQiWkHfpmEI4ge4Yg+XZzw=,tag:VhbSv3f09bKQFHGp1Q8jtw==,type:str]
Add proper Authentik scopes to minio OIDC config See https://integrations.goauthentik.io/infrastructure/minio/ for details that I was following
2025-10-01 19:33:51 +00:00
MINIO_IDENTITY_OPENID_SCOPES=ENC[AES256_GCM,data:Me2Iz+YwceOkka7chUUyozVLoruSCRDMSTs=,iv:nt8c5CxXpy/k0e2BxerveicqyQP43a3Wt7D0PqsAa/M=,tag:EK9tClqfuEsdIGbJ0WRe2Q==,type:str]
Add minio module for S3-compatible object storage Label Studio _really_ prefers using a direct object storage model. Can't say I blame them, it makes sense given they are running Python. I had to bump Authentik to not use its default port so that minio could use its own default port. That seemed safest given that Authentik is always proxied but minio/S3 may _not_ be. I'm just not sure.
2025-10-01 19:25:29 +00:00
sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlczY3WTFzb0ptNjBkY3Bt\naVk0ZU1SbWk1Y2xENFp6YTlXNUgzaGplMndNCm1JUXdRcVY0SytQWmFKOW5JRkxM\ndUVxYTVGMFpEWTNSWTJwbnNYcWptNXMKLS0tIHk0YTNMbzlvaHhwODlHeTRXWi9C\nb1JMVXdFaTFkeDVVVmxaU0ZXbWZFM0EK2jWRxg19oSXRYXKqpwK74SdP+LP+17zn\njyh/jXHK9dJ8TfqUk1+STVZfFfaKv/QXLl1EYkDY2iMwZMtTZQc/PQ==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_0__map_recipient=age1fnkhk9rv7r8gh84vxnhvndk4fgh20qcj4hvnfhdpumcydl6m6vrse50lrz
sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3dUY1MFQrNnVzWTV0Nkt5\nbFZEdGdPaVlrQXkwcGZBMXMzZURUMXFTamdZCnZTb2tOblpQMEg4cndEOEpvcUtL\nZkgyRDEyQXZXeVdkZHEydGFwZmlMT1UKLS0tIFd4cUdXU2lmYnI4M00xNVRBdFc0\nVURweDlINkp4ZnF2Y3YxMS9EN2J0NmsKgt4VjROqaoDKsUmoPMMY+JfyPgawCqYa\nsUTbRRbYrFRrmCih9lRpwy7WaEDyIHd8kJwm9qsneym6gSQQ4XbThg==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_1__map_recipient=age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDN1lVeWJROTZzWmllRndW\nZWwzUzIyelBkbGltZHM0NjNGd1psZERTRlZvCjBpUUtMWnhlcm1ieXR1bDNNdWlQ\nY0tFc1VhQlkyZ3hrR1VnQnczbWVSM0kKLS0tIFVVcmM3c3pjbVlwaDA3S2NwVHA2\nU21lb1JhRlgwN3ZmdXdWOTk5NmQxSEUKaiRUbl9/mX458ZjeGWQh9qMzwzDczgwf\nhZDw9DyzDUinVjgh1AM3SucSY5BJApFfJC1PHhKt3Kf/n74L1CQXpg==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_2__map_recipient=age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaMmMzWlVrc3JsQ2IrNFUw\nQWRGcDNZV1dXVVBqajM4R253bGxKZHlzSTBFCkVySGhnRW1kUmxPVWZESGNMSlJB\ndWYrRi9RaWVJaW90ME9zd3B5MUsvazgKLS0tIHd5blVHamcyNHVIZmtjV2M0dHVQ\nS3lWUkhMaHFvdC9Sc20rWFBnUUZQbzgK1yIYy1ZtppSvvCq6JPOvzWWAMVJioFCC\njJlK9iIn7fAtzOntR55Bv0fh0B0ld8kIK0+EDXiAvULwiYk+OWlW3w==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_3__map_recipient=age1ck44jqpuz3zlthquvuh7wsemrjrgfzhn462sk7rlfetwxpgy0uqs79xn2h
sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMQWwvemw3UUZ6Ny9ETjlx\nL0dqciszWC9pWFBBUVBhdHZhci9WMmFCN1JRCkFvbFg3R2l5aHMwYVFwUVVtZE9E\nSnZQbWw5RHdqenh1MXNOc21ZeVpIcGsKLS0tIGdteGpydDJxTEY2NXJ6eHNGR0NL\nS0V1VGNsUndtZkZQNkRDMi8vQmx6SDQKv5ZI4u6fEz6xndpVN/kLZDukvTgz+w2p\nnj1bG72SlK6tHEYZhTPOoG1HA779PaBikEZbxSh58EKADiScMh+ORA==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_4__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBiKzVKUlFRZXJad0VSUlNv\nTFVxYk91ZVUrNVFKYWJCSkQyWmhoUXVmd21FCmJUeENtaS8xTGxWMGs3T1hpNTBF\ndTBxM0ZTeHFxbStCckNkdWI1bDBHbGcKLS0tIHBUV1JIREJITTN3NEQ1ZTFJVnFM\nektnRDJsS0c5bkRzMVpubTdCdFlZajgKSyzgndvE6WuK+TCM7U1PZqYomKmGY/T9\nb7DsyVKpVJbHXuc2QH74bCLex4gWTMq+fcCitFppAgSqRgOR2HER+Q==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_5__map_recipient=age1j90h7hcp4fctr2xwj4zf9cxuelm43wkujvryc9hk6rzzc37rwdmss035w7
Add proper Authentik scopes to minio OIDC config See https://integrations.goauthentik.io/infrastructure/minio/ for details that I was following
2025-10-01 19:33:51 +00:00
sops_lastmodified=2025-10-01T19:31:19Z
sops_mac=ENC[AES256_GCM,data:UYy97YN9Fj8dcO71SHPcfFk8QtkS+3XAq/wWQnaxBixU2BnkMRfieJ2Oeai3EPiU3kOXPTkaOdv3+E5rTmY4WZl/qRTHldl9a7vnJdKJNPEM5fk1VdTbtOhYe8+sgmoyzgR+QgIHrJ1RTd36x5aYgGGwXtA19KLNGCfszcPin0Y=,iv:ubR4CFbz8p49YNLU52nObAYbiVD6nn6U+tVOfgn/wes=,tag:INzDrNnd3ve1YFVc3qFFMg==,type:str]
Add minio module for S3-compatible object storage Label Studio _really_ prefers using a direct object storage model. Can't say I blame them, it makes sense given they are running Python. I had to bump Authentik to not use its default port so that minio could use its own default port. That seemed safest given that Authentik is always proxied but minio/S3 may _not_ be. I'm just not sure.
2025-10-01 19:25:29 +00:00
sops_unencrypted_suffix=_unencrypted
sops_version=3.10.2
Reference in a new issue Copy permalink