Jan Novak
d541f2e1d2
Move the docker-30 service definitions (gitea, kanidm, vault, zot, nginx, lab-proxy, maru-hleda-byt, fuj-management) into vms-home/ to match the naming convention used for other hosts, and add the new garage object-storage and frisbee-drills services alongside it. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
35 lines
777 B
Markdown
35 lines
777 B
Markdown
## vault-cli install
|
|
|
|
```bash
|
|
VAULT_VERSION="1.21.2"
|
|
wget https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_amd64.zip
|
|
unzip vault_${VAULT_VERSION}_linux_amd64.zip
|
|
sudo mv vault /usr/local/bin/
|
|
```
|
|
|
|
## minio-cli
|
|
|
|
```bash
|
|
wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /tmp/minio-cli
|
|
chmod +x /tmp/minio-cli
|
|
sudo mv /tmp/minio-cli /usr/local/bin/minio-cli
|
|
|
|
minio-cli alias set synology http://192.168.0.2:9000 k8s ----proper secret here----
|
|
|
|
```
|
|
|
|
|
|
## backup token
|
|
|
|
```bash
|
|
mkdir -p /etc/vault.d/
|
|
vault policy write backup - <<EOF
|
|
path "sys/storage/raft/snapshot" {
|
|
capabilities = ["read"]
|
|
}
|
|
EOF
|
|
|
|
vault token create -policy=backup -period=8760h -orphan > /etc/vault.d/backup-token
|
|
chmod 600 /etc/vault.d/backup-token
|
|
|
|
``` |