barkstack/barkfile-parser
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: describe TreatVault service bootstrap
All checks were successful
Test and Release Module / test (push) Successful in 30s
Details
Test and Release Module / release (push) Successful in 8s
Details

Browse Source
This commit is contained in:
Shaun Campbell
2026-09-17 10:29:36 -04:00
parent f7af38f9ea
commit 4d683075a1
1 changed files with 2 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
README.md
View File

@@ -25,6 +25,7 @@ The current schema defines one `pawsql` block with a listener, an optional TLS `
- `upstream <host:port>` for an external PostgreSQL server. - `upstream <host:port>` for an external PostgreSQL server.
- `postgres { ... }` for a managed PostgreSQL container. Its `image`, `volume`, and `password_secret` directives are required. `password_secret` is a short lowercase reference resolved to the Docker secret `barkstack_<reference>`. `idle_timeout` and `traffic_idle_timeout` accept Go duration strings. - `postgres { ... }` for a managed PostgreSQL container. Its `image`, `volume`, and `password_secret` directives are required. `password_secret` is a short lowercase reference resolved to the Docker secret `barkstack_<reference>`. `idle_timeout` and `traffic_idle_timeout` accept Go duration strings.
- `treatvault { ... }` (optional, top-level) configures TreatVault: `file` is the path to the age-encrypted secret source of truth, and `identity_secret` is a short reference for the Docker secret holding the age identity (`barkstack_<reference>`).
```text ```text
pawsql { pawsql {
@@ -48,11 +49,7 @@ pawsql {
} }
``` ```
Create the referenced secret before deploying PawSQL: With TreatVault configured, create the referenced password through the TreatVault page in the Barkstack Console. `barkstack init` creates the identity Docker secret when absent; the TreatVault service initializes the encrypted file and creates the Docker secret on sync.
```sh
docker secret create barkstack_application_postgres_password /secure/path/application-postgres-password
```
## Watch validated changes ## Watch validated changes