store the forge webhook secret and grafana's secret key in bao, seeded from the existing files
This commit is contained in:
parent
50c1f2a3d1
commit
a4e48a7bca
1 changed files with 697 additions and 142 deletions
|
|
@ -115,8 +115,8 @@ The swarm's control plane. The swarm UI and `swarmctl` are its clients.
|
|||
→ [`docs/swarm/credentials-reference.md`](../docs/swarm/credentials-reference.md).
|
||||
|
||||
It reads its configuration once at startup, from the environment the nix module
|
||||
sets. It persists `webhook-secret` and `operator-matrix-admins.json` in its
|
||||
state directory.
|
||||
sets. It keeps the webhook HMAC secret in the secret store and
|
||||
`operator-matrix-admins.json` in its state directory.
|
||||
The job graph lives in memory; hive status and wanted state live in the swarm
|
||||
queue, so both survive a restart.
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue