vault: allow vaultwarden mailu secret

This commit is contained in:
Brad Stein 2026-01-19 02:23:16 -03:00
parent 2802c1e8b6
commit 35816115f8

View File

@ -207,7 +207,7 @@ write_policy_and_role "bstein-dev-home" "bstein-dev-home" "bstein-dev-home,bstei
write_policy_and_role "gitea" "gitea" "gitea-vault" \
"gitea/*" ""
write_policy_and_role "vaultwarden" "vaultwarden" "vaultwarden-vault" \
"vaultwarden/* shared/postmark-relay" ""
"vaultwarden/* mailu/mailu-initial-account-secret" ""
write_policy_and_role "sso" "sso" "sso-vault,sso-vault-sync,mas-secrets-ensure" \
"sso/* portal/bstein-dev-home-keycloak-admin shared/keycloak-admin shared/portal-e2e-client shared/postmark-relay harbor-pull/sso" ""
write_policy_and_role "mailu-mailserver" "mailu-mailserver" "mailu-vault-sync" \