Clarified the secret generation task.

This commit is contained in:
Tom
2026-02-09 13:36:38 +01:00
parent fe2672d55b
commit 852791e15a

View File

@@ -28,17 +28,17 @@
dest: /usr/local/bin/gitea
checksum: "sha256:{{ gitea_checksum_url }}"
- name: Pause to save the generated secrets in SOPS
- name: Pause to generate and save the secrets in SOPS
ansible.builtin.pause:
prompt: |
[SECURITY NOTICE]
If this is a fresh install, generate these secrets:
1. gitea generate secret INTERNAL_TOKEN
2. gitea generate secret JWT_SECRET
3. gitea generate secret LFS_JWT_SECRET
3. gitea generate secret JWT_SECRET
Copy the following keys into SOPS:
- gitea_lfs_jwt_secret
- gitea_internal_token
- gitea_lfs_jwt_secret
- gitea_jwt_secret
Press ENTER once done to continue.
when: gitea_internal_token is not defined