Provide secrets for engelsystem VM from pass

2023-07-29 01:46:30 +02:00 · 2023-07-29 01:46:30 +02:00 · a12b38b284
commit a12b38b284
parent f695afa981
2 changed files with 3 additions and 4 deletions
--- a/playbooks/templates/configs/engelsystem/compose.yaml.j2
+++ b/playbooks/templates/configs/engelsystem/compose.yaml.j2
@ -18,9 +18,8 @@ services:
      MAIL_HOST: send-only-mailserver.ccchh.net
      MAIL_PORT: 465
      MAIL_ENCRYPTION: tls
-      # MAIL_USERNAME and MAIL_PASSWORD are loaded from env file
-    env_file:
-      - engelsystem_secrets.env # Must be managed by the admin manually. Not managed by Ansible.
+      MAIL_USERNAME: aes
+      MAIL_PASSWORD: {{ lookup("community.general.passwordstore", "vm-secrets/engelsystem/MAIL_PASSWORD", create=false, missing="error") }}
    ports:
      - "5080:80"
    networks: