feat(secrets): seed batch — CNPG/backup seed secrets to OpenBao/ESO #174

Merged
k.renner merged 1 commits from openbao-seed into master 2026-07-13 23:27:09 +00:00
1 Commits
Author SHA1 Message Date
claude-botandClaude Fable 5 1c732045d5 feat(secrets): migrate seed secrets to OpenBao (seed batch)
seed/{authentik,immich,paperless} barman+hetzner creds and
seed/influxdb bootstrap: values in OpenBao KV (homelab/seed/*), all
round-trip-verified text. Future cold rebuilds no longer need the age
key for the seed phase. Decryption blocks dropped from every seed-* KS
(incl. dormant seed-audiobookshelf/seed-music-assistant and the
suspended, deprecated seed KS).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CRgBFn9m8a2ncFMLusikH6
2026-07-14 01:25:28 +02:00