daniel/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: implement secret management with SOPS

Browse Source
This commit is contained in:
Daniel Cosme
2026-04-20 19:58:02 -04:00
parent 6e1da78e02
commit e3c73ed372
20 changed files with 260 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
magefiles/magefile.go
View File

@@ -20,17 +20,27 @@ var Aliases = map[string]any{
func init() {
Env := map[string]string{
"LINUX_ADMIN": "arch",
"CLUSTER_NAME": root.HYDRA_CLUSTER,
"CLUSTER_HOST": root.HYDRA_HOSTNAME,
"GITEA_HOST": root.GITEA_HOST,
"LINUX_ADMIN": "arch",
"CLUSTER_NAME": root.HYDRA_CLUSTER,
"CLUSTER_HOST": root.HYDRA_HOSTNAME,
"GITEA_HOST": root.GITEA_HOST,
"GO_SECRETS": root.GO_SECRETS_FOLDER,
"ENC_SECRETS_PATH": root.GO_ENC_SECRETS_FOLDER,
"HYDRA_PATH": root.FLUX_APPS_HYDRA_PATH,
"SECRETS_FOLDER": root.SECRETS_FOLDER,
"HYDRA_SECRETS_PATH": root.FLUX_APPS_SECRETS_HYDRA_PATH,
}
r = target.NewRunner(Env, nil)
}
func Build() error {
t := target.NewA("go", "run", ".")
return r.RunV("run", t)
t := target.NewA("go", "run", "./cmd/apps/main.go")
return r.RunV("Build apps", t)
}
func Build_secrets() error {
t := target.NewA("go", "run", "./cmd/secrets/main.go")
return r.RunV("Build secrets", t)
}
func InstallK3S() error {
@@ -47,3 +57,15 @@ func InstallFlux() error {
t := target.New("./scripts/install_flux.sh")
return r.RunV("Install Flux", t)
}
// Uploads AGE Key to flux as a Kubernetes secret
func Enc_flux() error {
t := target.New("./scripts/encrypt_flux.sh")
return r.RunV("Upload key to flux", t)
}
// Encrypt and decrypt Go files that contain secrets.
func Enc_Dec(opt string) error {
t := target.NewA("./scripts/enc_dec_go.sh", opt)
return r.RunV("Enc or Dec Go secrets", t)
}