Gleipnir/nixos-systems
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
nixos-systems/secrets/label-studio.env

32 lines
6.1 KiB
Bash
Raw Normal View History

Set up reverse proxy, configure hostname It was rather rediculously hard to get the CSRF settings correct. I don't think I can register new users on anything but the commandline at this point via: podman exec -it podman-label-studio /bin/bash label-studio start --username <username> --password <password> Where <username> should actually be an email.
2025-10-01 18:40:39 +00:00
CSRF_TRUSTED_ORIGINS=ENC[AES256_GCM,data:HPYhZbUzzX4hllx+vxukvBt5pQmhtuQOyUdMMcN2Tfyb5qoFCp6bNg==,iv:6kPzUq/vVb6BcdDR/416sayXtdbzrMK8R4YzF5oFcpw=,tag:ti60NmwO+HXP9T9Svan27w==,type:str]
Connect label-studio to postgres
2025-10-01 18:20:13 +00:00
DJANGO_DB=ENC[AES256_GCM,data:5p2whEaP0g==,iv:IDLzn0xPKr63sd5wThrSIvqTWtcjkdc3iGje9HEb++I=,tag:pfGm8XSkufXEbewM5vtzTQ==,type:str]
Disable signup for new users in label studio I'll manually create all the users myself
2025-10-03 14:14:54 +00:00
LABEL_STUDIO_DISABLE_SIGNUP_WITHOUT_LINK=ENC[AES256_GCM,data:rkUvFg==,iv:klBCEYXSd97RAE6zqEjZ+HjGqs23Mwhw3Bfj3u2+NBU=,tag:kd+R2Jvzw3QsZbonNCt3FQ==,type:str]
Set up reverse proxy, configure hostname It was rather rediculously hard to get the CSRF settings correct. I don't think I can register new users on anything but the commandline at this point via: podman exec -it podman-label-studio /bin/bash label-studio start --username <username> --password <password> Where <username> should actually be an email.
2025-10-01 18:40:39 +00:00
LABEL_STUDIO_HOST=ENC[AES256_GCM,data:gMfXulE5Bi51D3Aqg3mYKcBWv6FUey5MeY6CWTxu8Y3FpTCYwMQTaQ==,iv:s5HIQ53jXa8V8GbGrWCDRZr+XKTcqo7bwQya9c8e85A=,tag:6wp9YCz4Dew9Aqw0ra7rjg==,type:str]
Connect label-studio to postgres
2025-10-01 18:20:13 +00:00
POSTGRE_NAME=ENC[AES256_GCM,data:/wWte4TeVcdXOvnr,iv:3PuvF5pxB5uQNGIOXXD1W+W0o0juWGBjQgy+dRbPUes=,tag:4ubNBGK+dXpGQKznfHvThA==,type:str]
POSTGRE_USER=ENC[AES256_GCM,data:LP53XnRnWw+oZ89v,iv:wWXhT7aES7G/HDIWEj9Pr7rXVhJMOeZHXznOELwIky8=,tag:iKgc09fO0d7fpoU5uZQocA==,type:str]
POSTGRE_PASSWORD=
POSTGRE_PORT=ENC[AES256_GCM,data:QYIANQ==,iv:AAvgTBLZ6rSnyo3of4PS4TKyIigsqiacEgsoswSCBvY=,tag:6yPCo8vUWHMU8P4CC86I2g==,type:str]
Set up reverse proxy, configure hostname It was rather rediculously hard to get the CSRF settings correct. I don't think I can register new users on anything but the commandline at this point via: podman exec -it podman-label-studio /bin/bash label-studio start --username <username> --password <password> Where <username> should actually be an email.
2025-10-01 18:40:39 +00:00
POSTGRE_HOST=ENC[AES256_GCM,data:xWCzr+P+ZcjiSJhBidUQ,iv:VURrsclkJ9/VjbuCGTavrVOHBo1Vb8UzvIYVhbINpDo=,tag:l8YZ0WenX1oM00oLvTsBtw==,type:str]
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_0__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVeTdSTG9TMHlqa1dUMkVh\nSmR4RHhDOWxzVC9BWXFEanBDSmxjWHZyWWd3CkgyaTNobDRJQzFyd1JFT2p6Q2Ri\nWk1VZ2xmS0MwZE9mRE9GY01sQnE5aVUKLS0tIFlwZlU0ZE5ERVFzUlZWbmlHT1VK\ndHhvbHhMSHNCenFLTHlmUjVVZFFvNFkKMtF9GzwWGyn1Qa728lgbTjEtLpUX16/j\nKBKjonAxfSsVKVULwJ1vHau/IeeEW+Nghv4Go6IhT5FMIMcBOPRQDg==\n-----END AGE ENCRYPTED FILE-----\n
Add new staging server key for sops
2026-02-18 05:06:57 +00:00
sops_age__list_0__map_recipient=age1wxlwx75hfxer4trvfzad7cwdn2hhu4we50p32vpy3qvdct7t656q3pp04x
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_1__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQcVNtK1pCWXJGRnVQcGVU\naDh2ZXJLdTRRVllQN0FuUjZkSmdZWi9CTERrClZTc2dBVVBHU2xlak00VC91NW5k\nUGdTdis5aU5RMVRHQ203U2xtN0FJOEUKLS0tIGlNeWJJSmlGbmVQeFhPM1ZPSEFZ\naDl4R1dLTGRub1dpVGorcW8wVkt5R0EKXW22WML/0pq7P2gVzLQrL47VcONbKxgr\ngP3bmURfZq0PtpxD7AKw73NRnnXfMCBkQjAhUEgcrSd9YrojCWUIXQ==\n-----END AGE ENCRYPTED FILE-----\n
Connect label-studio to postgres
2025-10-01 18:20:13 +00:00
sops_age__list_1__map_recipient=age1x704pjnueguchkl54ly8w4w26ltys5900v7xnl7w3zlgasus09jszz45t8
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_2__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzbVliSjBOT0ZNaGwvYlRF\nd2twTTZzUm4rd2ZsaGM3TnJ6WHM3bHhwRlVvCmpvTFdlNzgrSDQyNEkvcGt0UlFz\ndHJ3YXc5cHQwNTdFOWl4MFhodUF5SUUKLS0tIGczWXpGZHR1ZE1vMFhVL0hpMStQ\nSHhPOXVRTFI3RWxEWkJ0b216V3lmcTgKJufzTl9UScFx4Sf4worqBB6mvHxe5jIu\nd1o8SaQA+JXKWRex1PP3Mn0RLylhzNYOgIArW17aCHwreQJlm7qAuQ==\n-----END AGE ENCRYPTED FILE-----\n
Connect label-studio to postgres
2025-10-01 18:20:13 +00:00
sops_age__list_2__map_recipient=age15y4k929zaj9fdg3vd40pa40tgvrgv9mn22xfummn5zxfmkcw5d0st6prjx
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_3__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkWTBMZTltbzJvOFM0SDM3\nUmdGREEvREJuOTdjRGQ1SVBRN1dVUi9RTTBNCkJQdHJhalhHenpocHBYbjlqZzE4\nY3hIbVg0R0tiLzAzOXhnY05iNVZVSmsKLS0tIC9FN1RsbHYwdHY3dXNaWEd3a2dl\nWlRycXJOVzlCT2dhNmxsU1VWL2kvUEkKg6mL3X7FgjT73fS0ffimWejhJ+Ctj1Pk\n9v7y63Th1BR0OBfbFbpJwBjH0G3KcD8BLAGVo4oeDXUEUsfLpr3/KA==\n-----END AGE ENCRYPTED FILE-----\n
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
sops_age__list_3__map_recipient=age1q5syuyx3n255vllv6elfj72yk5mhxnk9pqawzyy4gzkzmpw3gpjqz9ujx2
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_4__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBheHU0YUxBbkNWKzU3OFNl\nYXI2dVAyTnFHQ2Qwd1RmdXN0VnB5SVFTOVRRCjRiWFZ1eUljaE5kM1RhdWJ2R3Zq\ncG5aclYvTXdibU9Vek9BczBiN2llWjgKLS0tIGhKbUc4UU1FNzNQcGFSNVlEN1dq\naVZ2ZUZZR2dJWE13blVQTXlseXVDRkUK0agWd/Djvtp/oNtzRfK1UtppQjs9mq8T\nuwy+xhLFPMFK7aQGv8SNVoNruv1YaMWWP317dHqljcvPqdelAM8kKg==\n-----END AGE ENCRYPTED FILE-----\n
Update host key for corp server
2026-01-13 04:48:16 +00:00
sops_age__list_4__map_recipient=age1rqa4qvkk7s26pgj09d269t84vprdrh0jhyl75xq5zyhp9cdssq2qc8hut8
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_5__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjbWtsNTdMTFcxd2Qzc05V\nc3NYbm1EY2ZKWjRJQ2x6UW1hZ240aGZDdG5vCnI2QUdlUTdkNVltejh4czJBdmx5\nZ3kralBWNG9vcFpmbjBZbk5vWXV3cDQKLS0tIHZHSE16SmFXS0hNc1k1bjBoN1R5\nSEU4VWg5bDNwdjhXdmpUei9pUEFRbTQKl25NwFFygsf7Oeeb4F7RRF/4twdxDzcw\niQysj72bDea8OJdU+h4E1o9UFjnw9FtQmcYsGmvnCu5Nmd9n19SjUQ==\n-----END AGE ENCRYPTED FILE-----\n
WIP getting legacy-sexcore back up At this point I was able to successfully nixos-anywhere the system and SSH back in afterwards. That's progress worth keeping.
2026-01-04 17:21:22 +00:00
sops_age__list_5__map_recipient=age1yfs6d0vac45rnx3q54u52tjk5vnfsqnghaj95kmkl7fd5du3ee8qgse385
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_6__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKeUErUlAvcUNPQkJ0czZI\nc01qTmVObEthVjF1Y0QrTXN0Zm13dVFLYUNVCmZiZjBaalRRdnFXcjgxSWZYcnRQ\nWFhCZ01nUldnVnh0UkU2K2ZmVzNKTncKLS0tIFIvbmZ0TWo0aDdnYnBvZGFKVFZM\nZVlnM0R2cStDc2JJSW85T0dOdHd2bEUKvlGUbk6iQJI5XH+HWgaV87aKUdgd2YRl\njW9unZPJ6ol2Qr7JxW9/sSxVhv3ekeOwCF6wIpf87DoapNKl36kLqw==\n-----END AGE ENCRYPTED FILE-----\n
Add dev_poweredge key For building nix binary cache
2025-12-15 18:47:41 +00:00
sops_age__list_6__map_recipient=age1t3ryfktuhr3cysf49m9q2n8fkjf9ajjjnhztxw9hz8paxgk4lpcq065jge
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_7__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBDSE9DUWZyeGR6Z1ZCNG5l\nU2kyaE1tczczeWV4ajZPR1JEcktHWm1vVjBFCjJZdG5wUHNERDdZa0l5eDVLakF6\nbVZPTGZRUGVmRWxPbUZaVjNkYWZ6R3cKLS0tIEpkQUZGeGd6dmJwRjRpMnVOdTFE\ndW1TNFJNakpLSGIxMEg1YUEyWFRHS3cKdFkFDatCdgRmi0tIlLwN7iGlm6lzTrMv\nCpEjm45mRJKyhgmAGAMHsTRiPs5nwvaNf0p/5NNpSS9pLx8KYsPx+g==\n-----END AGE ENCRYPTED FILE-----\n
Re-wipe nocix-amd-legacy-sexcore again, update secrets (again)
2026-01-05 03:31:47 +00:00
sops_age__list_7__map_recipient=age167q6r28ws6wrpjwxnt4ap2fgs6d9cyvrdhzl2wflr2tnsw5xapxq36n2ec
Update staging server key after rebuild
2026-02-18 15:24:52 +00:00
sops_age__list_8__map_enc=-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0Rm5wdkNhbXdNbHFHZHFV\nQms1UXdLSWhHR1ZOWktZa1lNS29ySUQ5ZmpZCkROV3JmcGJOaW1XYmE3NGlPOGdk\nb2ZFN2Y0UllPb1daZ0wrQW81YWhtZDAKLS0tIGQ2WXNwcHVLNU02bXhDQThVVzVz\nVWFrNHR4YVJBVlVBb1BXRGZwZk9KamMK60dTJGLmqYF6/9bE7NaP8up832FSZfep\nwyyOtcy8OrvvbjfYfTHls/DESyrjb9edFaliEY5DcInQmVPObbEu8Q==\n-----END AGE ENCRYPTED FILE-----\n
sops_age__list_8__map_recipient=age1924evks66k9g6c4zcnn2ghjcxpe0fzw2y9j253xredkwqnw9p5qqjcvjqt
Disable signup for new users in label studio I'll manually create all the users myself
2025-10-03 14:14:54 +00:00
sops_lastmodified=2025-10-01T23:02:30Z
sops_mac=ENC[AES256_GCM,data:lWnIGGsDUF+vAHrOX73POlBJTet+Hlyfv+7yPB8qXzJ+Cbtbhmie5tvmF419Dy482A5LAm9X1GsqZpJ1JVFYjnneGc7X0H+s6fJQZHk6zRSrIRA3Iva5eq08eYY5ie/+sdQYUC37zY6fg6w1oUiWoHKufLBeGyX0QbGseTu+Rho=,iv:rl+eoKlnnjuwkQouSIGTpMCVoGKbPrBt9lmlhO5HlJs=,tag:fj3jyMKbUFFJMT6JyGW9ug==,type:str]
Connect label-studio to postgres
2025-10-01 18:20:13 +00:00
sops_unencrypted_suffix=_unencrypted
sops_version=3.10.2
Reference in a new issue Copy permalink