Перенесены секреты из .env в SM

2026-07-30 19:22:48 +03:00
parent 049c45db5c
commit e24ed9d8ef
58 changed files with 3350 additions and 1054 deletions
@@ -0,0 +1,190 @@
+{
+  "version": 1,
+  "mode": "selectel",
+  "runtime_dir": "/run/han-chat/secrets",
+  "http": {
+    "timeout_seconds": 10,
+    "retries": 3,
+    "max_response_bytes": 1048576
+  },
+  "selectel": {
+    "account_id": "123456",
+    "username": "han-secrets-reader",
+    "project_name": "han-production",
+    "region": "ru-9",
+    "interface": "public",
+    "password_file": "selectel-service-user-password"
+  },
+  "secrets": {
+    "DATABASE_URL": {
+      "remote": "DATABASE_URL",
+      "consumers": ["api-backend", "api-migrate"],
+      "max_bytes": 4096
+    },
+    "BITRIX_DATABASE_URL": {
+      "remote": "BITRIX_DATABASE_URL",
+      "consumers": ["bitrix-local-app", "bitrix-local-migrate"],
+      "max_bytes": 4096
+    },
+    "BITRIX_SYNC_DATABASE_URL": {
+      "remote": "BITRIX_SYNC_DATABASE_URL",
+      "consumers": ["bitrix-sync", "bitrix-sync-migrate"],
+      "max_bytes": 4096
+    },
+    "SMS_DATABASE_URL": {
+      "remote": "SMS_DATABASE_URL",
+      "consumers": ["sms-service", "sms-worker", "sms-migrate"],
+      "max_bytes": 4096
+    },
+    "KEYCLOAK_DB_PASSWORD": {
+      "remote": "KEYCLOAK_DB_PASSWORD",
+      "consumers": ["keycloak"],
+      "max_bytes": 1024
+    },
+    "KEYCLOAK_ADMIN_PASSWORD": {
+      "remote": "KEYCLOAK_ADMIN_PASSWORD",
+      "consumers": ["keycloak"],
+      "max_bytes": 1024
+    },
+    "CURSOR_HMAC_SECRET": {
+      "remote": "CURSOR_HMAC_SECRET",
+      "consumers": ["api-backend"],
+      "max_bytes": 1024
+    },
+    "KEYCLOAK_OTP_HMAC_KEY": {
+      "remote": "KEYCLOAK_OTP_HMAC_KEY",
+      "consumers": ["keycloak"],
+      "max_bytes": 1024
+    },
+    "KEYCLOAK_OTP_MOCK_CODE": {
+      "remote": "KEYCLOAK_OTP_MOCK_CODE",
+      "consumers": ["keycloak"],
+      "max_bytes": 1024
+    },
+    "KEYCLOAK_YANDEX_CAPTCHA_SERVER_KEY": {
+      "remote": "KEYCLOAK_YANDEX_CAPTCHA_SERVER_KEY",
+      "consumers": ["keycloak"],
+      "max_bytes": 1024
+    },
+    "BITRIX_TOKEN_ENCRYPTION_KEY": {
+      "remote": "BITRIX_TOKEN_ENCRYPTION_KEY",
+      "consumers": ["api-backend", "bitrix-local-app", "bitrix-sync"],
+      "max_bytes": 1024
+    },
+    "REDIS_API_PASSWORD": {
+      "remote": "REDIS_API_PASSWORD",
+      "consumers": ["redis"],
+      "max_bytes": 1024
+    },
+    "REDIS_URL": {
+      "remote": "REDIS_URL",
+      "consumers": ["api-backend", "delivery-worker", "cleanup-worker"],
+      "max_bytes": 4096
+    },
+    "REDIS_REALTIME_URL": {
+      "remote": "REDIS_REALTIME_URL",
+      "consumers": ["api-backend"],
+      "max_bytes": 4096
+    },
+    "REDIS_SAFETY_PASSWORD": {
+      "remote": "REDIS_SAFETY_PASSWORD",
+      "consumers": ["redis"],
+      "max_bytes": 1024
+    },
+    "MESSAGE_SAFETY_REDIS_URL": {
+      "remote": "MESSAGE_SAFETY_REDIS_URL",
+      "consumers": ["message-safety", "safety-recovery-worker"],
+      "max_bytes": 4096
+    },
+    "REDIS_HEALTH_PASSWORD": {
+      "remote": "REDIS_HEALTH_PASSWORD",
+      "consumers": ["redis", "redis-exporter"],
+      "max_bytes": 1024
+    },
+    "MESSAGE_SAFETY_SERVICE_TOKEN": {
+      "remote": "MESSAGE_SAFETY_SERVICE_TOKEN",
+      "consumers": ["api-backend", "message-safety"],
+      "max_bytes": 1024
+    },
+    "BITRIX_LOCAL_APP_INTERNAL_TOKEN": {
+      "remote": "BITRIX_LOCAL_APP_INTERNAL_TOKEN",
+      "consumers": ["api-backend", "bitrix-local-app"],
+      "max_bytes": 1024
+    },
+    "BITRIX_INTERNAL_API_TOKEN": {
+      "remote": "BITRIX_LOCAL_APP_INTERNAL_TOKEN",
+      "consumers": ["api-backend", "bitrix-local-app"],
+      "max_bytes": 1024
+    },
+    "BITRIX_API_FORWARD_TOKEN": {
+      "remote": "BITRIX_API_FORWARD_TOKEN",
+      "consumers": ["api-backend", "bitrix-local-app"],
+      "max_bytes": 1024
+    },
+    "BITRIX_API_INBOX_TOKEN": {
+      "remote": "BITRIX_API_FORWARD_TOKEN",
+      "consumers": ["api-backend", "bitrix-local-app"],
+      "max_bytes": 1024
+    },
+    "BITRIX_SYNC_SERVICE_TOKEN": {
+      "remote": "BITRIX_SYNC_SERVICE_TOKEN",
+      "consumers": ["api-backend", "bitrix-sync"],
+      "max_bytes": 1024
+    },
+    "KEYCLOAK_SETTINGS_BRIDGE_TOKEN": {
+      "remote": "KEYCLOAK_SETTINGS_BRIDGE_TOKEN",
+      "consumers": ["api-backend", "keycloak"],
+      "max_bytes": 1024
+    },
+    "SMS_SERVICE_TOKEN": {
+      "remote": "SMS_SERVICE_TOKEN",
+      "consumers": ["sms-service", "sms-worker", "keycloak"],
+      "max_bytes": 1024
+    },
+    "KEYCLOAK_SMS_SERVICE_TOKEN": {
+      "remote": "SMS_SERVICE_TOKEN",
+      "consumers": ["sms-service", "sms-worker", "keycloak"],
+      "max_bytes": 1024
+    },
+    "IDGTL_SMS_API_KEY": {
+      "remote": "IDGTL_SMS_API_KEY",
+      "consumers": ["sms-service", "sms-worker"],
+      "max_bytes": 1024
+    },
+    "IDGTL_SMS_CALLBACK_USERNAME": {
+      "remote": "IDGTL_SMS_CALLBACK_USERNAME",
+      "consumers": ["sms-service", "sms-worker"],
+      "max_bytes": 1024
+    },
+    "IDGTL_SMS_CALLBACK_PASSWORD": {
+      "remote": "IDGTL_SMS_CALLBACK_PASSWORD",
+      "consumers": ["sms-service", "sms-worker"],
+      "max_bytes": 1024
+    },
+    "BITRIX_CLIENT_SECRET": {
+      "remote": "BITRIX_CLIENT_SECRET",
+      "consumers": ["bitrix-local-app"],
+      "max_bytes": 1024
+    },
+    "BITRIX_APPLICATION_TOKEN": {
+      "remote": "BITRIX_APPLICATION_TOKEN",
+      "consumers": ["bitrix-local-app"],
+      "max_bytes": 1024
+    },
+    "SELECTEL_S3_SECRET_KEY": {
+      "remote": "SELECTEL_S3_SECRET_KEY",
+      "consumers": ["api-backend"],
+      "max_bytes": 1024
+    },
+    "SELECTEL_S3_ACCESS_KEY": {
+      "remote": "SELECTEL_S3_ACCESS_KEY",
+      "consumers": ["api-backend"],
+      "max_bytes": 1024
+    },
+    "OTEL_REMOTE_AUTH_HEADER": {
+      "literal": "",
+      "consumers": ["otel-collector"],
+      "max_bytes": 4096
+    }
+  }
+}