diff --git a/deployment/decrypt-secrets.sh b/deployment/decrypt-secrets.sh index d971ca7..4d03f51 100755 --- a/deployment/decrypt-secrets.sh +++ b/deployment/decrypt-secrets.sh @@ -1,5 +1,7 @@ #!/bin/bash + + if [ "$ENCRYPTION_KEY" = "" ]; then echo "ENCRYPTION_KEY not set" exit 1 @@ -10,6 +12,7 @@ if [ "$MD5_CHECKSUM" = "" ]; then exit 1 fi + SECRETS_CIPHERTEXT_FILE=secrets.enc SECRETS_PLAINTEXT_FILE=/tmp/secrets TMP_FILE=`mktemp` diff --git a/deployment/deploy-yml.tmpl b/deployment/deploy-yml.tmpl index 059e329..83b6357 100644 --- a/deployment/deploy-yml.tmpl +++ b/deployment/deploy-yml.tmpl @@ -42,7 +42,7 @@ kind: Ingress metadata: name: nutri annotations: - cert-manager.io/cluster-issuer: letsencrypt-staging-http + cert-manager.io/cluster-issuer: letsencrypt-production-http spec: tls: - hosts: diff --git a/deployment/oidc-config-test.json b/deployment/oidc-config-test.json index f79e07a..9e77016 100644 --- a/deployment/oidc-config-test.json +++ b/deployment/oidc-config-test.json @@ -5,7 +5,7 @@ "client_id": "nutri", "client_secret": "%CLIENT_SECRET%", "redirect_uris": [ - "https://nutri.hottis.de/*" + "https://nutri-test.hottis.de/*" ], "userinfo_uri": "https://auth2.hottis.de/realms/hottis/protocol/openid-connect/userinfo", "token_uri": "https://auth2.hottis.de/realms/hottis/protocol/openid-connect/token"