titan-iac/services/comms/scripts/comms_vault_env.sh

28 lines
1.0 KiB
Bash

#!/usr/bin/env sh
set -eu
vault_dir="/vault/secrets"
read_secret() {
cat "${vault_dir}/$1"
}
export TURN_STATIC_AUTH_SECRET="$(read_secret turn-shared-secret__TURN_STATIC_AUTH_SECRET)"
export TURN_PASSWORD="${TURN_STATIC_AUTH_SECRET}"
export LIVEKIT_API_SECRET="$(read_secret livekit-api__primary)"
export LIVEKIT_SECRET="${LIVEKIT_API_SECRET}"
export BOT_PASS="$(read_secret atlasbot-credentials-runtime__bot-password)"
export SEEDER_PASS="$(read_secret atlasbot-credentials-runtime__seeder-password)"
export CHAT_API_KEY="$(read_secret chat-ai-keys-runtime__matrix)"
export CHAT_API_HOMEPAGE="$(read_secret chat-ai-keys-runtime__homepage)"
export MAS_ADMIN_CLIENT_SECRET_FILE="${vault_dir}/mas-admin-client-runtime__client_secret"
export PGPASSWORD="$(read_secret synapse-db__POSTGRES_PASSWORD)"
export MAS_DB_PASSWORD="$(read_secret mas-db__password)"
export MATRIX_SHARED_SECRET="$(read_secret mas-secrets-runtime__matrix_shared_secret)"
export KEYCLOAK_CLIENT_SECRET="$(read_secret mas-secrets-runtime__keycloak_client_secret)"