Files
Hermes Agent aadebcc0fd feat(winnie): OIDC Zitadel en PKCE via un secret sops oidc_env
- secret oidc_env (secrets/winnie.yml, chiffre pour tower) materialise par le oneshot winnie-oidc-secret dans /var/lib/winnie/oidc.env, requis par winnie-backend (EnvironmentFile non optionnel)
- PKCE : pas de client_secret cote backend
- .sops.yaml : creation_rule pour secrets/winnie.yml
2026-10-17 16:56:17 -04:00

16 lines
1.3 KiB
YAML

oidc_env: ENC[AES256_GCM,data:CDXc17/GNkFKzPmQDy1X2TLA8Z2h0x4s6KsOl065uuPyNpcpUF94Xc1F9FJeJANnon6MyvgaRImyry6QNoMZs4UQ0efHHTDzFZQO2DN3prEA0g5KmLYTtgzXzuXYWNJvElS/EVuzW1ZFAhjMXF+YTddNk391w3b1MukYiF/yXWN2lzYubGK0/l4Uyh987J+FMC7XT3X0GjI1nrD0HhRs2c6RdUPfrE3rmzZPOsDxbga7hdEtJw52xg==,iv:8KPlv0T6/effSBwu3gWEneJyqjgsoHOlC8z2rrMC5xw=,tag:ukwggk+6AbRfOlvuCJtH8Q==,type:str]
sops:
age:
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwYVpLZnUwR0dnYng1SXFC
cEtMQmE3ZHhpOXhHVjI4NjRRR0s0ektlYWtrCm96WEJCdWdRTmUrT1BMRU44dzFS
TE1uSE5WK0tLVnhKeTBpZGVzaUdRdHcKLS0tIDMxQzEzMmFJbnRqV2tzWURJUnhk
dXhOUnp1b05DekdHR2NiVG1qZWJpdlEK09D1epeoG5/NWUCZvoi4VcBMMl3cMZ6V
iqZlg5MPpLb0QZFQY2IJ0r3mkPlcpuV7NVvpJsvI17T8D2kI0kG0vw==
-----END AGE ENCRYPTED FILE-----
recipient: age1usm3v0ugducrzcwud60dda7xfnj49fdhecj7kcsfm7dzwzrzeyqq2jc2hm
lastmodified: "2026-10-12T03:16:55Z"
mac: ENC[AES256_GCM,data:UtMkqPwSnJTzPvtlrLv8JSfku9znNFtLYJIwFYjrBOxukyS0cCcE9sz92fiEYNZpO8TkxIp+Lccf80JoSZPtTdRvp6WBkBUMhO1MFVt0LQ0MIH4CzrF1MrrfyVn4QiAUrLhNVNJHivbCmIg3fqOcfYpnIdv8qjowrlhVig/lQkM=,iv:NAswLKpeo2CtOFG13AZk6MCfpUNjiGAYbCnO/SZlrAQ=,tag:Ab2Dt//WqhpO6/WrEEomsA==,type:str]
unencrypted_suffix: _unencrypted
version: 3.13.3