aly.codes / infra
Hybrid cloud cluster monorepo with Ansible, K8s, NixOS, and Terraform. cute.haus
ansible terraform nix k8s
1
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

k8s: don't expose secrets to rclone mounts

Aly Raffauf (Jun 25, 2026, 12:41 AM EDT) ef4e5fd7 8198bf3d

+10 -4
-3
k8s/charts/audiobookshelf/templates/deployment.yaml
··· 33 33 env: 34 34 - name: TZ 35 35 value: "America/New_York" 36 - envFrom: 37 - - secretRef: 38 - name: audiobookshelf-rclone 39 36 ports: 40 37 - name: http 41 38 containerPort: 80
+1 -1
k8s/charts/paperless/templates/deployment.yaml
··· 169 169 privileged: true 170 170 envFrom: 171 171 - secretRef: 172 - name: paperless-env 172 + name: paperless-rclone 173 173 volumeMounts: 174 174 - name: rclone-media 175 175 mountPath: /paperless/media
+9
k8s/charts/paperless/templates/secret.yaml
··· 10 10 PAPERLESS_ADMIN_PASSWORD: {{ .Values.secret.PAPERLESS_ADMIN_PASSWORD | quote }} 11 11 PAPERLESS_DBPASS: {{ .Values.secret.PAPERLESS_DBPASS | quote }} 12 12 PAPERLESS_SECRET_KEY: {{ .Values.secret.PAPERLESS_SECRET_KEY | quote }} 13 + --- 14 + apiVersion: v1 15 + kind: Secret 16 + metadata: 17 + name: paperless-rclone 18 + labels: 19 + app: {{ .Chart.Name }} 20 + type: Opaque 21 + stringData: 13 22 RCLONE_CONFIG_B2_TYPE: {{ .Values.secret.RCLONE_CONFIG_B2_TYPE | quote }} 14 23 RCLONE_CONFIG_B2_ACCOUNT: {{ .Values.secret.RCLONE_CONFIG_B2_ACCOUNT | quote }} 15 24 RCLONE_CONFIG_B2_KEY: {{ .Values.secret.RCLONE_CONFIG_B2_KEY | quote }}