cristiano.hoshikawa/deploy_langfuse_oci
1
0
Fork 0
mirror of https://github.com/hoshikawa2/deploy_langfuse_oci.git synced 2026-07-09 17:14:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

first commit

Browse Source
This commit is contained in:
hoshikawa2
2026-05-07 13:02:13 -03:00
commit 94fb5e68c6
14 changed files with 3128 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

81
update_secret.sh Normal file
View File

@@ -0,0 +1,81 @@
#!/bin/bash
set -ex
echo "🔐 Atualizando secrets no OCI Vault..."
# =========================
# ⚙️ CONFIG
# =========================
export OCI_SECRET_OCI_SECRET="ocid1.vaultsecret.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
export OCI_SECRET_OCI_ACCESS="ocid1.vaultsecret.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
export OCI_SECRET_SALT="ocid1.vaultsecret.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
export OCI_SECRET_ENCRYPTION="ocid1.vaultsecret.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
export OCI_SECRET_NEXTAUTH="ocid1.vaultsecret.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
export OCI_SECRET_CLICKHOUSE="ocid1.vaultsecret.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
export OCI_SECRET_REDIS="ocid1.vaultsecret.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
export OCI_SECRET_DB="ocid1.vaultsecret.oc1.iad.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
# =========================
# 🔑 VALORES
# =========================
DB_PASSWORD="langfuse123"
REDIS_PASSWORD="redis123"
CLICKHOUSE_PASSWORD="clickhouse123"
NEXTAUTH_SECRET_VALUE="nextauth-secret-123"
SALT_VALUE="salt-secret-123"
# ⚠️ OBRIGATÓRIO:
# 64 chars hex / 256 bits
ENCRYPTION_KEY=$(openssl rand -hex 32)
echo "🔐 ENCRYPTION_KEY gerada:"
echo "$ENCRYPTION_KEY"
# =========================
# 🔧 FUNÇÃO UPDATE
# =========================
update_secret() {
local secret_ocid=$1
local value=$2
echo "🔄 Atualizando secret: $secret_ocid"
local base64_value
base64_value=$(printf "%s" "$value" | base64 | tr -d '\n')
oci vault secret update-base64 \
--secret-id "$secret_ocid" \
--secret-content-content "$base64_value"
}
# =========================
# 🔥 UPDATE
# =========================
update_secret "$OCI_SECRET_DB" "$DB_PASSWORD"
update_secret "$OCI_SECRET_REDIS" "$REDIS_PASSWORD"
update_secret "$OCI_SECRET_CLICKHOUSE" "$CLICKHOUSE_PASSWORD"
update_secret "$OCI_SECRET_NEXTAUTH" "$NEXTAUTH_SECRET_VALUE"
update_secret "$OCI_SECRET_ENCRYPTION" "$ENCRYPTION_KEY"
update_secret "$OCI_SECRET_SALT" "$SALT_VALUE"
echo ""
echo "✅ Secrets atualizados com sucesso!"
echo ""
echo "👉 ENCRYPTION_KEY usada:"
echo "$ENCRYPTION_KEY"