GeneralBots/botserver
2
1
Fork 0
Code Issues Pull requests Projects Releases 323 Packages Wiki Activity Actions

fix: store vault-unseal-keys in working directory, not /opt/gbo/secrets

Browse source
This commit is contained in:
Rodrigo Rodriguez (Pragmatismo) 2025-12-19 12:28:22 -03:00
parent 182f1b8cdc
commit f20d662941
1 changed files with 6 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
src/core/package_manager/facade.rs
View file

@ -354,12 +354,8 @@ impl PackageManager {
.as_str() .as_str()
.context("No root token in output")?; .context("No root token in output")?;
// Create secrets directory // Write vault-unseal-keys file in working directory
let secrets_dir = PathBuf::from("/opt/gbo/secrets"); let unseal_keys_file = PathBuf::from("vault-unseal-keys");
std::fs::create_dir_all(&secrets_dir)?;
// Write vault-unseal-keys file
let unseal_keys_file = secrets_dir.join("vault-unseal-keys");
let mut unseal_content = String::new(); let mut unseal_content = String::new();
for (i, key) in unseal_keys.iter().enumerate() { for (i, key) in unseal_keys.iter().enumerate() {
if i < 3 { if i < 3 {
@ -385,7 +381,7 @@ impl PackageManager {
// Check if .env exists, create or append // Check if .env exists, create or append
let env_file = PathBuf::from(".env"); let env_file = PathBuf::from(".env");
let env_content = format!( let env_content = format!(
"\n# Vault Configuration (auto-generated)\nVAULT_ADDR=http://{}:8200\nVAULT_TOKEN={}\nVAULT_UNSEAL_KEYS_FILE=/opt/gbo/secrets/vault-unseal-keys\n", "\n# Vault Configuration (auto-generated)\nVAULT_ADDR=http://{}:8200\nVAULT_TOKEN={}\nVAULT_UNSEAL_KEYS_FILE=vault-unseal-keys\n",
ip, root_token ip, root_token
); );
@ -454,11 +450,11 @@ impl PackageManager {
✓ Vault initialized and unsealed automatically ✓ Vault initialized and unsealed automatically
✓ Created .env with VAULT_ADDR, VAULT_TOKEN ✓ Created .env with VAULT_ADDR, VAULT_TOKEN
✓ Created /opt/gbo/secrets/vault-unseal-keys (chmod 600) ✓ Created vault-unseal-keys (chmod 600)
Files created: Files created:
.env - Vault connection config .env - Vault connection config
/opt/gbo/secrets/vault-unseal-keys - Unseal keys for auto-unseal vault-unseal-keys - Unseal keys for auto-unseal
On server restart, run: On server restart, run:
botserver vault unseal botserver vault unseal