Перенесены секреты из .env в SM

2026-07-30 19:22:48 +03:00
parent 049c45db5c
commit e24ed9d8ef
58 changed files with 3350 additions and 1054 deletions
@@ -0,0 +1,6 @@
+[Unit]
+# Enable only on a dedicated HAN Chat Docker host after the Selectel canary and
+# file fallback have both passed. A failed secret sync intentionally blocks
+# Docker startup so containers cannot race an empty /run directory.
+Requires=han-secrets@production.service
+After=han-secrets@production.service