mirror of
https://github.com/hanzoai/vm.git
synced 2026-10-01 00:47:56 +00:00
zooqueenandHanzo Dev
a121f8d0d0
- Rename Go module from github.com/casvisor/casvisor to github.com/hanzoai/visor - Update all copyright headers from casbin to Hanzo Industries Inc - Remove all hardcoded passwords and credentials from config files - All credentials now sourced from environment variables / Hanzo KMS - Switch default database from MySQL to PostgreSQL (matching production) - Rename binary output from server/casvisor to visor - Update Dockerfile, build.sh, docker-compose.yml, docker-entrypoint.sh - Replace casdoor* config key references with iam* equivalents - Update CI to use PostgreSQL service and mark CI-only test password - Add visor and casvisor binaries to .gitignore - Add envFrom secretRef for visor-env in K8s deployment - Add ExternalSecret template for Hanzo KMS credential provisioning Co-authored-by: Hanzo Dev <[email protected]>
78 lines
2.1 KiB
YAML
78 lines
2.1 KiB
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: visor-config
|
|
namespace: hanzo
|
|
type: Opaque
|
|
stringData:
|
|
app.conf: |
|
|
appname = hanzo-visor
|
|
httpport = 19000
|
|
runmode = prod
|
|
SessionOn = true
|
|
copyrequestbody = true
|
|
driverName = postgres
|
|
dataSourceName = ${DB_DSN}
|
|
dbName = hanzo_visor
|
|
tableNamePrefix =
|
|
isDemoMode = false
|
|
logPostOnly = true
|
|
redisEndpoint =
|
|
guacamoleEndpoint = 127.0.0.1:4822
|
|
iamEndpoint = http://iam.hanzo.svc.cluster.local:8000
|
|
clientId = ${IAM_CLIENT_ID}
|
|
clientSecret = ${IAM_CLIENT_SECRET}
|
|
iamOrganization = "hanzo"
|
|
iamApplication = "app-hanzo-visor"
|
|
redirectPath = /callback
|
|
isLocalIpDb = false
|
|
publicDomain = ""
|
|
adminDomain = ""
|
|
enableExtraPages = false
|
|
defaultLanguage = "en"
|
|
staticBaseUrl = "https://cdn.hanzo.ai"
|
|
htmlTitle = "Hanzo Visor"
|
|
faviconUrl = "https://cdn.hanzo.ai/static/favicon.png"
|
|
logoUrl = "https://cdn.hanzo.ai/img/hanzo-visor-logo.png"
|
|
showGithubCorner = false
|
|
defaultColorPrimary = "#fd4444"
|
|
logConfig = {"adapter":"console"}
|
|
commerceUrl = ${COMMERCE_URL}
|
|
commerceToken = ${COMMERCE_TOKEN}
|
|
autoscalerClusters = ${AUTOSCALER_CLUSTERS}
|
|
---
|
|
# Credentials should be provisioned via Hanzo KMS or external-secrets operator.
|
|
# Example ExternalSecret (if using external-secrets):
|
|
#
|
|
# apiVersion: external-secrets.io/v1beta1
|
|
# kind: ExternalSecret
|
|
# metadata:
|
|
# name: visor-credentials
|
|
# namespace: hanzo
|
|
# spec:
|
|
# refreshInterval: 1h
|
|
# secretStoreRef:
|
|
# name: hanzo-kms
|
|
# kind: ClusterSecretStore
|
|
# target:
|
|
# name: visor-env
|
|
# data:
|
|
# - secretKey: DB_DSN
|
|
# remoteRef:
|
|
# key: visor/db-dsn
|
|
# - secretKey: IAM_CLIENT_ID
|
|
# remoteRef:
|
|
# key: visor/iam-client-id
|
|
# - secretKey: IAM_CLIENT_SECRET
|
|
# remoteRef:
|
|
# key: visor/iam-client-secret
|
|
# - secretKey: COMMERCE_URL
|
|
# remoteRef:
|
|
# key: visor/commerce-url
|
|
# - secretKey: COMMERCE_TOKEN
|
|
# remoteRef:
|
|
# key: visor/commerce-token
|
|
# - secretKey: AUTOSCALER_CLUSTERS
|
|
# remoteRef:
|
|
# key: visor/autoscaler-clusters
|