77 lines
3.4 KiB
YAML
77 lines
3.4 KiB
YAML
# AWOOOI 正式環境 Secrets 模板
|
||
# ================================
|
||
# 負責人: CIO / CISO
|
||
# 版本: v1.1
|
||
# 日期: 2026-03-22
|
||
#
|
||
# ⚠️ 使用說明:
|
||
# 1. 複製此檔案為 03-secrets.yaml
|
||
# 2. 將所有 CHANGE_ME 替換為實際值
|
||
# 3. 03-secrets.yaml 已加入 .gitignore，禁止提交
|
||
# 4. 生產環境透過 CI/CD Secrets 注入
|
||
|
||
apiVersion: v1
|
||
kind: Secret
|
||
metadata:
|
||
name: awoooi-secrets
|
||
namespace: awoooi-prod
|
||
type: Opaque
|
||
stringData:
|
||
# ============================================================================
|
||
# 資料庫 (192.168.0.188 PostgreSQL)
|
||
# ============================================================================
|
||
DATABASE_URL: "postgresql+asyncpg://awoooi:CHANGE_ME@192.168.0.188:5432/awoooi_prod"
|
||
|
||
# ============================================================================
|
||
# Redis (192.168.0.188:6380, DB 0 - 與 OpenClaw 共用)
|
||
# ============================================================================
|
||
REDIS_URL: "redis://192.168.0.188:6380/0"
|
||
|
||
# ============================================================================
|
||
# AI 服務 API Keys (ADR-006 備援順序: Ollama → Gemini → Claude)
|
||
# ============================================================================
|
||
GEMINI_API_KEY: "CHANGE_ME"
|
||
CLAUDE_API_KEY: "CHANGE_ME"
|
||
|
||
# ============================================================================
|
||
# Phase 9: Agent Teams (ADR-009)
|
||
# Claude Agent SDK 需要 ANTHROPIC_API_KEY
|
||
# ============================================================================
|
||
ANTHROPIC_API_KEY: "CHANGE_ME"
|
||
|
||
# ============================================================================
|
||
# Phase 5.5: Telegram Gateway (OpenClaw 通知)
|
||
# ============================================================================
|
||
OPENCLAW_TG_BOT_TOKEN: "CHANGE_ME"
|
||
OPENCLAW_TG_CHAT_ID: "CHANGE_ME"
|
||
OPENCLAW_TG_USER_WHITELIST: "CHANGE_ME" # 逗號分隔的 User ID
|
||
|
||
# ============================================================================
|
||
# Webhook 安全 (CISO 要求: HMAC-SHA256 簽章)
|
||
# ============================================================================
|
||
WEBHOOK_HMAC_SECRET: "CHANGE_ME_TO_RANDOM_64_CHARS"
|
||
|
||
# ============================================================================
|
||
# JWT 認證 (未來擴展)
|
||
# ============================================================================
|
||
JWT_SECRET: "CHANGE_ME_TO_RANDOM_STRING"
|
||
JWT_ALGORITHM: "HS256"
|
||
|
||
# ============================================================================
|
||
# Phase 15.1: Langfuse LLMOps (192.168.0.110:3100)
|
||
# ============================================================================
|
||
LANGFUSE_PUBLIC_KEY: "CHANGE_ME"
|
||
LANGFUSE_SECRET_KEY: "CHANGE_ME"
|
||
|
||
# ============================================================================
|
||
# Phase 10: Sentry Self-Hosted (192.168.0.110:9000)
|
||
# 2026-03-27: 首席架構師審查 - 補齊遺漏配置
|
||
# 2026-03-29: Wave A.1 新增 SENTRY_AUTH_TOKEN (ADR-037)
|
||
# ============================================================================
|
||
# API DSN (Project ID: 3)
|
||
SENTRY_DSN: "http://8c4a210fd52909bbbdab642a166ff66e@192.168.0.110:9000/3"
|
||
# Auth Token for API Comment/Issues 操作 (Settings → API Keys → Scopes: project:write)
|
||
SENTRY_AUTH_TOKEN: "CHANGE_ME"
|
||
# Web DSN (Project ID: 2) - 需在 Web ConfigMap 配置
|
||
# NEXT_PUBLIC_SENTRY_DSN: "http://da02d4e5d6542e4d1ed6b2dd6542efeb@192.168.0.110:9000/2"
|