Commit Graph

2 Commits

Author SHA1 Message Date
Jeff Emmett 8ef5c678c2 feat: wire Postiz spaces to pull secrets from Infisical at runtime
- Template uses entrypoint-wrapper.sh to inject secrets at container start
- Only INFISICAL_* credentials + POSTGRES_PASSWORD in .env (3 values)
- All other secrets (JWT, EMAIL_PASS, OAuth, social API keys) from Infisical
- Generator produces minimal .env templates per space
- Added infisical_slug to spaces.yml for each Postiz project
- Added missing EMAIL_PASS + POSTGRES_PASSWORD to Infisical projects

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 21:10:59 -08:00
Jeff Emmett dc95494ab8 chore: backlog update - close completed tasks, add cleanup items
- TASK-4: Infisical secret migration (Done)
- TASK-5: Centralized spaces config with Sablier + OAuth (Done)
- TASK-6: Remove plaintext .env files from server (To Do)
- TASK-7: Clean up duplicate rsocials-online Infisical project (To Do)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 21:03:09 -08:00