Custom secret types

The following custom secret types are defined.

starshard.space/telegram-api-credentials

Telegram API application credentials, obtainable at My Telegram.

id: "1234567"
hash: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"

starshard.space/telegram-bot-credentials

Contains the bot's token, obtainable at @BotFather.

token: "0000000000:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"

starshard.space/discord-bot-credentials

Contains the application's ID, the application's public key, and the bot token.

id: "1234567890123456789"
public-key: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
bot-token: "xxxxxxxxxxxxxxxxxxxxxxxxxx.XXXXXX.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

starshard.space/oidc-client-credentials

Contains credentials for a OIDC client.

name: "Star Shard Solutions"
issuer: "https://starshard.solutions/oauth2/openid/CLIENTNAME"
client-id: "CLIENTNAME"
client-secret: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

starshard.space/smtp-credentials

Contains credentials to send mail via SMTP.

host: "smtp.example.org"
port: "465"
username: "name@example.org"
password: "xxxxxxxxxxxxxxxx"

starshard.space/imgproxy-signing

Contains the key and the salt for signing imgproxy URLs.

key: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
salt: "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"

starshard.space/s3-credentials

Contains credentials to access a S3 bucket.

name: "key-might-have-a-name"
id: "0000000000000000000000000"
key: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
endpoint: "s3.eu-south-67.example.org"
location: "eu-south-67"
bucket: "this-is-a-bucket"
prefix: "dear/god/"

starshard.space/forgejo-jwt-config

Contains a JWT configuration for Forgejo, as defined in Forgejo's documentation.

Secrets can be generated by launching a shell in the Forgejo container, then running forgejo generate secret CONFIG_KEY_NAME.

algorithm: "hs256"
secret: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"