paths

readme.md

@@ -29,6 +29,10 @@ To stop all the containers, you can ctrl+c, or
 
     ./scripts/down
 
+To generate secrets for all services
+
+    ./scripts/secrets
+
 ## port forwarding
 
 The caddy service expects to be able to bind to ports 80 and 443

scripts/generate-secrets

@@ -0,0 +1,4 @@
+echo generating zitadel secrets; {
+	openssl rand -hex 16 | tr -d '\n' >! secrets/auth/zitadel/MASTER_KEY
+	openssl rand -hex 32 | tr -d '\n' >! secrets/auth/zitadel/STORAGE_PASSWORD
+}

services/secrets/generate-secrets

@@ -9,5 +9,5 @@ set -o pipefail
 for secret in /secrets/*/*/* ; do
   test -d "$secret" && rmdir "$secret"
   test -s "$secret" && continue
-  openssl rand -hex 64 > $secret
+  openssl rand -hex ${2:-64} > $secret
 done