services/nextcloud/password.txt était committé en clair ("nextcloudpassword")
depuis le 25/11/2025, jamais référencé dans la config, exposé publiquement
sur github/codeberg depuis. Supprimé.
adminpassFile ne fixe le mot de passe QUE lors de l'install initiale (occ
maintenance:install) : sur une instance déjà installée il est ignoré, donc
juste changer le secret sops n'aurait pas suffi. Ajout d'un ExecStartPost
sur nextcloud-setup qui force le mot de passe du compte root à la valeur
sops à chaque activation (self-healing).
Vérifié sur tower : ancien mot de passe "nextcloudpassword" -> 401 après
le switch, hash oc_users.password changé.
71 lines
10 KiB
YAML
71 lines
10 KiB
YAML
gemini_api_key: ENC[AES256_GCM,data:Vg89eEvW1fqGcJjYH84Eqrv+CGYS7Biyzty0qw/njLiaLVa2DcFa,iv:qjtUV1lCMEMHE2vrITXPxN2aJAdpI9DEujzH9OBXm84=,tag:+DxplL+xbSedRWlno4wdPg==,type:str]
|
|
anthropic_api_key: ENC[AES256_GCM,data:0s2zG7ZzmdUNju8OpKlRwxfubd/y3fATwnnVNv4MTfEjV8e+j3SZsGbvoL2WbTOnzvzyEaFX0aB0fPCTp4uxfhBufUl29OXyJrXyJIOvpM6ZI7PwuWvEkAki5pFYZgFjNmlz9lULwNh4n6VL,iv:ijC33I8Vg8zO0K3XX1adnoduGZr9qYjabUUCsPISzeE=,tag:zBeyZg4kMKxFgX4ZKceFVQ==,type:str]
|
|
nextcloud_admin_password: ENC[AES256_GCM,data:MXTO/0BlGdizWQ==,iv:sEY2fN6u2a8NprLhru8O0HhG/qiWntyC7ivgbNcD2Zc=,tag:aFi8dIBQzU1HGgAlQBeXIA==,type:str]
|
|
nextcloud_password: ENC[AES256_GCM,data:dvYrWhtIypHcGw==,iv:G3Jhg3vYOQb8ru4AH4HNQ3hBgc/OxaNrDDUxKL/3glI=,tag:56SAS9IBFg6Vn/jGqtgO6Q==,type:str]
|
|
nextcloud_admin_user: ENC[AES256_GCM,data:4G4OLQ==,iv:r5Mf4UG3CCi5PfLZw6Ly5jgmlfJm/bYNuh/fq/muc5Y=,tag:qAOWEMJN7BS3Nu6lUmyOFA==,type:str]
|
|
vaultwarden_admin_token: ENC[AES256_GCM,data:CQDoFfH9sKifl/yMQZmCFOlljjWS/bxWKd05,iv:YY8gXi3Ibis+AuHe6y3rUPkAW3pqGpHaYi84kjtLuOs=,tag:yHQBQcm1AdrgIWYZ1EGKAA==,type:str]
|
|
vaultwarden_db_password: ENC[AES256_GCM,data:1mnXJFCUgwemDfLOZn7WvF4o+8wVoZ/kRyDhMSucr3kkRMNsZ7Jue4C/13rZuSYh,iv:/u1xXrVT4JdOBcW5A2QFudenq5iAsK51agvPXp9U6F0=,tag:+lX6ftrV220vX4blJvCj4g==,type:str]
|
|
nextcloud_user: ENC[AES256_GCM,data:Ha4Uwg==,iv:cvS3E+ynqHoHm2FD0I/Mp0OWJfoE9DtdtDYXkK4LKZs=,tag:3hKkCczwWo6yCOJlzgzoQw==,type:str]
|
|
wifi_ap25g: ENC[AES256_GCM,data:IaMchO3+mJSsB5o=,iv:ToxPMHuj5nVewMJxNnopCmQkuizdji+hOye6loiDFnY=,tag:khhHRsOhz3qN8G4bUW/OxA==,type:str]
|
|
wifi_hkt: ENC[AES256_GCM,data:yh1n7dHSUof/6zM=,iv:57B721emA50vRPXhjDMNFsm/nZBHpFdsBAlatQdCpUQ=,tag:T8hnp/65Nf45+zcpxBfzMQ==,type:str]
|
|
wifi_wifi_de_marc: ENC[AES256_GCM,data:8iQ4dOFboI/8pUkVRhgC7/jDXCo=,iv:SAlVjCtoljMb7tODHPcfrTgqkZiPjrcRLnMN38HVudo=,tag:FQa3fqPm5E++azNrdmmFJg==,type:str]
|
|
wifi_wifi_de_marc_2_4g: ENC[AES256_GCM,data:ER7IAhvODiuVjao8c5or2+hMc/o=,iv:J9JOqQ0ifqGztblmdRR9GrtJz24Pv3e0+Y6QkH1vSHo=,tag:JfzAC09aQi7fgzKKoMSFyA==,type:str]
|
|
pangolin_env: ENC[AES256_GCM,data:HM/s+i55RgHLSL4KNwsyEUEMTy3zSrSrwlmWt7/pb3z11htSHZDjNIjPJHPdfq7gvXSYZGGValgglrCxuwD4Bhs3k97e0H4f28WSu4ZQH5ikvRZKeySdpKGK7M5OAVYwo8C7rNeLDbIz5sNghaH8xc3yUNzsn9y4J29ufUiZ1wwzxITsCL0yOabN3GJc1s0lpLlh5M140kAjBueT9BgBj9+uLwUo2yRD8V/0m5Qk0bnSOGP86eSopu8gDQ==,iv:YMVlcailneap9tYuGx9KFBo6cANaYR15091uWysXOIY=,tag:6/ralsNNHf0ZOqu+SOu0pw==,type:str]
|
|
newt_env: ENC[AES256_GCM,data:ZvbK5GLIdZW4Ry9VO8ssqYEKFThOqe4x391sK/SD6M5XPCct7L49apyNu7PygtnNwJbAg+qW4TD6SlWRYMYBGrvD6GEN5CBA2W5WkxVb1X/LEVM+q/DIAQGnJh1ZZ9Tle1ZJLScWDG0w9JhTCZ6z+rYRjmxuwu4cAd2nmBeJqLK1PgYWoX4/0rO9ns5wog==,iv:ptI1gXb8Q1T2UIKFW3DGmbg6sVlxwnsoQ4GvRCnSTrQ=,tag:OLLs2htywljkus4u7EYhAg==,type:str]
|
|
zitadel_db_password: ENC[AES256_GCM,data:SoWp+EaEr8Vvz+PQ1CgreLIMXV3bzUir9HmF6g==,iv:QoWO+Iqio5JZpVm6NfI6tMp4C+1ekj04/4HJbjSXfLA=,tag:+d5cWEmJpk8PyyZ5F//XuQ==,type:str]
|
|
zitadel_admin_password: ENC[AES256_GCM,data:WzJ9gNMC9Co7qj9sdeu+ftr5AqjWjwUaYBWNJVqDEg==,iv:LLNkLn7o7DMOKI2ATePGUAlti3gpQ9hOoVlVVpHF6Jc=,tag:PkbXTbCNRzpptgnPtyVbFw==,type:str]
|
|
zitadel_master_key: ENC[AES256_GCM,data:YJr2IoueNAuJtegeeRoRF635PyGZ8mujk/oGoP3Ukc+alyw=,iv:75jT+RTDIF3ayCzRyhLUCpgypYG/TVNdbcu6u+8NoEw=,tag:00mTMqsq79ol2gRzIvmxqw==,type:str]
|
|
wireguard:
|
|
vps_private_key: ENC[AES256_GCM,data:0HfmUgfc2mocOTSnMhOqUOEqwXP213yHMnvTUReSgez6zccTxC5TQqdtzu0=,iv:rjBs6pztAXh1GehbM5LfIGQnUX1HplYXqYQwfc186sg=,tag:OL5HSXJqAeWrqPXDDkzhyA==,type:str]
|
|
stalwart_mail_pw2: ENC[AES256_GCM,data:c1qUp2tzvyqwyWmCI0W6/Zrts+Q=,iv:xG3pLzXWCzK5BftLSZ/dSyped/MmqX185trotuhBSFY=,tag:awRlTnXlcH48TwnlFzeTjA==,type:str]
|
|
stalwart_mail_pw3: ENC[AES256_GCM,data:/OWDgDc6BmQgF/GpgiubWsLpJ0w=,iv:w74nNmLh/KGvj2nvsNk9NE0bQJng9/zCiMdNPzeRhZA=,tag:VqrSX+ttWcJSo8e8gOH1Zg==,type:str]
|
|
stalwart_spam_pw: ENC[AES256_GCM,data:1asaL2YWMZ8GAiuDrANmxD0chpM=,iv:4CDiwdJQsYMgcc1N1P4pNvybgk3U2r4VbwcoSHMimUk=,tag:TceG/xF46HKrrxMwrcLW9A==,type:str]
|
|
stalwart_noreply_pw: ENC[AES256_GCM,data:uCXJOno/HYugBTkXIQv2ZZyvepk=,iv:RCHSPnmRBbIwCaVLDJwWZKLUJ8f9VttOVhmf2nF3uqg=,tag:rXmOSfocUiDrsG4FKFbsCA==,type:str]
|
|
stalwart_admin_pw: ENC[AES256_GCM,data:MuQDJ+cE79QwlLr5/E2Gk/ja2f0=,iv:myvTPdk8hDFvVArpeWfaAICVPwg5nSW/MrXkiEh8Rak=,tag:4SbEdoO+QZsdnoOBSuyDpA==,type:str]
|
|
stalwart_bob_pw: ENC[AES256_GCM,data:TvqOpc4DpEWhenLVukPknf8ZedE=,iv:BgmaiIOwxwN46sgy+ddvA3PPUvbXOb/FVUef70fzcnI=,tag:tW9zry7qQLKxeTbsdit5tQ==,type:str]
|
|
stalwart_acme_secret: ENC[AES256_GCM,data:C2rEVN0QOchPfNFTiJNgxzYt9g01AMeiECw43JP5LByRy8vX70Ze+sRHvQPrX/CHgRRmTRE=,iv:DChSa5fQv5dPRljMLdwMBLRLrfdUef6hPcCJC4+kAos=,tag:Uy6a7qWxtvEVdesaff1ZtA==,type:str]
|
|
postgres_crt: ENC[AES256_GCM,data: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,iv:1VOV53zaJgE2IsxWOCjvxyC6vVV+Q8eQZr0ZGf3YVP4=,tag:WTaW+9B0PhVBskApePW1Mg==,type:str]
|
|
postgres_key: ENC[AES256_GCM,data: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,iv:GutSu4hsM/5vpj8kBIr3etyJydKblaopparN4/6Tf94=,tag:Yt1k6rKyeSP4hZKuZH5qyw==,type:str]
|
|
sops:
|
|
age:
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2dFgyd1VSWUxLZTZNbkZa
|
|
c0x5Uk9EOGtBbTJXQzVwQWpGMFAyRkRmQWlrClVBSzFxR3VtVEdFdVpOZ21xcXl4
|
|
ZndSaVgra3oyQ3ZXQTRnYTJWUEJncWcKLS0tIFRGMDhDZkZJNTRmdXhESCtrcDlK
|
|
R1FONm52SFYvZ2hnUm9MOWhBbGU4cFUKAzvxN3xv9DeRmlWxVKjLQjvifRLkuzOL
|
|
kg1mjiNqbLDTge6wFyjmpOpOpuqDzlv7lLJH0Af3yLt1ghPHeiehcg==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age189v3q8quejkaz4r8u0g2aechsfk4sk3465khx35erd320rea5scq98v7er
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXWmlpZFBqM1lteWhacHcx
|
|
ZDdZZUpQZEdCaVI5b3kyZkt5VEMveVNYbzFJCnEvYVlFRExzR0M5WjRZUjNvbGcw
|
|
NkMxQWtodTVVdUZzcS9pYXJPV0xoV2sKLS0tIDhXVWtyeFB3ZEx3cjZqV1lwVld4
|
|
VWFSakJvZTJFOXBkaEVOaDYrSlo2aFEKyN2A4vPJ8szeIhwVC/VExXj7kDggJE02
|
|
FtzFIiwHVLzWkIlUc6SFFVX43Q1Z3aYmQtnDuXDBZVOSQfMtg96eew==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1usm3v0ugducrzcwud60dda7xfnj49fdhecj7kcsfm7dzwzrzeyqq2jc2hm
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0N1FWaVV4MGNnWmExaW8r
|
|
UjlnMlZEQnlrSDA0RERONXBYdTM3bDFLZ0VNCmEvVFhXT2lhMHV0QlRWbXNFYWRE
|
|
WXlVTDZQVXIzT2FvSW5yN2VIQ2tMd0kKLS0tIC9qMW14QWJIei9PbDQ0L0ZYaHRB
|
|
U0NCT0ptR3dlNjdRVlMwZTR4UDRGWEkKiLgiuZWVKYGEtoh4o0iEwdzzngUAkFn1
|
|
YRpNjwSqiCIsoerTyN7oghbRnNKY8kSl4TyNGiaxwUprLdzEqgwLbw==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1fwgg9h68zz8s6xa8qt4yn7gqcqp59s0mma8xdfq9hunksqv8fq4qd9yfaz
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXcXFPV0g4c2ZSOWdhZGhl
|
|
SUh1K2NMSWEyTWU3SzJIUGd1L3g0MEdlVWs4CmhXdTkxT3lQYWdDa2ljYkg5cXUz
|
|
Z3ZTWmE4RTNacXM4RFNmWUZ1WU1qZXMKLS0tIFFTR0YwV2RVcTZ3aXBtNUs5UE9s
|
|
anFCMmpFNzBob21LMUprdzkwV1IxUHMKQ+BcKYxGY3Lph/byMfUjf3pDgue2Q7up
|
|
PbCNf5QMRd82DCYnCIMk5WD/A5kQArnd+jDjaHuaQp14SRdZ4ph+8Q==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1rhnaejc5nwcqcuq5qt45wzr2fncurlwqw0adhnavfraqsdzffatqh5yhl4
|
|
lastmodified: "2026-09-28T04:48:43Z"
|
|
mac: ENC[AES256_GCM,data:SlyWkzQqqgsDT1uLC5LwWhPhGyexjK1+7Qq02OECNXmr9dhoGzNf76+G1nCoLP5czd4MpaCnk7//aN6Qs6M9DhBV8GG4wDN9pFGWq7JgE7GvPTzJ3J3Ady+yaat3k1HdAE775lIHERa79lxMurzJn66ctgSmsYuIf52qf1WI3GU=,iv:kbawvEBfwyJHYJ0+Q1e0fGTmudPj+mwptt/NxH1u87o=,tag:UYBB28ndbNFSdV0Pf0ncAw==,type:str]
|
|
unencrypted_suffix: _unencrypted
|
|
version: 3.13.3
|