secrets.yml
Make sure you generate strong passwords for the variables. Recommended to use tools like pwgen
1
pwgen -s 32 -n 24
Copied!
Important Don't upload this file as plain text to your Github repository. First encrypt the file and after that upload it to the repository
1
# Secrets
2
SECRET_MYSQL_ROOT_PASSWORD: "SET-ME"
3
SECRET_COMMON_HTPASSWD_PASS: "SET-ME"
4
SECRET_COMMON_MONGO_READ_ONLY_PASS: "SET-ME"
5
SECRET_COMMON_MYSQL_ADMIN_PASS: "SET-ME"
6
SECRET_COMMON_MYSQL_MIGRATE_PASS: "SET-ME"
7
SECRET_COMMON_MYSQL_READ_ONLY_PASS: "SET-ME"
8
SECRET_EDXAPP_CELERY_PASSWORD: "SET-ME"
9
SECRET_EDXAPP_COMMENTS_SERVICE_KEY: "SET-ME"
10
SECRET_EDXAPP_MYSQL_CSMH_PASSWORD: "SET-ME"
11
SECRET_EDXAPP_MYSQL_PASSWORD: "SET-ME"
12
SECRET_EDXAPP_MYSQL_PASSWORD_ADMIN: "SET-ME"
13
SECRET_EDXAPP_MYSQL_PASSWORD_READ_ONLY: "SET-ME"
14
SECRET_FORUM_API_KEY: "SET-ME"
15
SECRET_MARIADB_CLUSTER_PASSWORD_ADMIN: "SET-ME"
16
SECRET_MONGO_ADMIN_PASSWORD: "SET-ME"
17
SECRET_XQUEUE_BASIC_AUTH_PASSWORD: "SET-ME"
18
SECRET_XQUEUE_BASIC_AUTH_USER: "SET-ME"
19
SECRET_XQUEUE_MYSQL_PASSWORD: "SET-ME"
20
SECRET_XQUEUE_RABBITMQ_PASS: "SET-ME"
21
SECRET_RABBIT_ADMIN_PASSWORD: "SET-ME"
22
SECRET_EDXAPP_EDXAPP_SECRET_KEY: "SET-ME"
23
SECRET_EDXAPP_MONGO_PASSWORD: "SET-ME"
24
SECRET_FORUM_MONGO_PASSWORD: "SET-ME"
25
SECRET_EDXAPP_AWS_SECRET_ACCESS_KEY: "SET-ME"
Copied!
Before uploading this file to GitHub or other repos make sure you encrypt it, you can follow these steps to encrypt the secrets.yml
After running the following command the prompt will ask you for a password, make sure you save this password, so you can use it in the future to decrypt the file.

ENCRYPT SECRETS FILE

Bash
in the deployer folder, run following command
1
ansible-vault encrypt edx-configs/secrets.yml
Copied!

DECRYPT SECRETS FILE

To decrypt the file you should use the password you entered when you ran the previous command
in the deployer folder, run following command
1
ansible-vault decrypt edx-configs/secrets.yml
Copied!
Last modified 4mo ago