b4f371d415
- Add .sops.yaml (age) and encrypt every plaintext Secret manifest in apps/ - Commit the Flux GitRepository/Kustomization (previously only applied manually) with a decryption stanza referencing the sops-age key (created out-of-band, not committed) - Rotate JWT_SECRET (previously exposed in plaintext) and set a real AI_SERVICE_KEY (was an empty placeholder), shared between nxtgauge-backend-rust and nxtgauge-ai-assistant - Wire JWT_SECRET into the ai-assistant deployment (was missing entirely, causing every authenticated request to fail) - Redact the leaked LiteLLM production master key from README/OPENCODE_CONNECT docs; move the litellm prod overlay off a plaintext secretGenerator onto an encrypted patch |
||
|---|---|---|
| .. | ||
| configmap.yaml | ||
| db-secret.yaml | ||
| deployment.yaml | ||
| ingress.yaml | ||
| kustomization.yaml | ||
| postgres.yaml | ||
| ratelimit.yaml | ||
| secret.yaml | ||
| service.yaml | ||