Nxtgauge GitOps Configuration
- Add .sops.yaml (age) and encrypt every plaintext Secret manifest in apps/ - Commit the Flux GitRepository/Kustomization (previously only applied manually) with a decryption stanza referencing the sops-age key (created out-of-band, not committed) - Rotate JWT_SECRET (previously exposed in plaintext) and set a real AI_SERVICE_KEY (was an empty placeholder), shared between nxtgauge-backend-rust and nxtgauge-ai-assistant - Wire JWT_SECRET into the ai-assistant deployment (was missing entirely, causing every authenticated request to fail) - Redact the leaked LiteLLM production master key from README/OPENCODE_CONNECT docs; move the litellm prod overlay off a plaintext secretGenerator onto an encrypted patch |
||
|---|---|---|
| .github/workflows | ||
| apps | ||
| clusters/production | ||
| docs | ||
| ops | ||
| scripts | ||
| .sops.yaml | ||
| .test_push | ||
| OTP_ISSUE_FIX_PROMPT.md | ||
| ROUTE_ISSUE_ANALYSIS.md | ||