b4f371d415
- Add .sops.yaml (age) and encrypt every plaintext Secret manifest in apps/ - Commit the Flux GitRepository/Kustomization (previously only applied manually) with a decryption stanza referencing the sops-age key (created out-of-band, not committed) - Rotate JWT_SECRET (previously exposed in plaintext) and set a real AI_SERVICE_KEY (was an empty placeholder), shared between nxtgauge-backend-rust and nxtgauge-ai-assistant - Wire JWT_SECRET into the ai-assistant deployment (was missing entirely, causing every authenticated request to fail) - Redact the leaked LiteLLM production master key from README/OPENCODE_CONNECT docs; move the litellm prod overlay off a plaintext secretGenerator onto an encrypted patch |
||
|---|---|---|
| .. | ||
| ai-guard | ||
| forgejo | ||
| github-actions-runners/base | ||
| litellm | ||
| nxtgauge-admin-solid | ||
| nxtgauge-ai-assistant | ||
| nxtgauge-backend-rust | ||
| nxtgauge-frontend-solid | ||
| ollama/base | ||
| postgresql | ||
| registry | ||