summaryrefslogtreecommitdiff
path: root/stacks/auth/secrets.sh
blob: 19031da71bf8f2a4e6eb366b9a5b9b51574fc26c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
#!/bin/bash

USERS=(RATDAD)
SECRETS=(SESSION_SECRET STORAGE_ENCRYPTION JWT_SECRET OIDC_HMAC_SECRET)
SECRET_DIR=$PWD/secrets

[ ! -d "$SECRET_DIR" ] && mkdir -p "$SECRET_DIR"

# Generate secrets
for filename in "${SECRETS[@]}"; do
    openssl rand -hex 64 > "$SECRET_DIR"/"$filename"
done

# Generate admin passwords
for filename in "${USERS[@]}"; do
    openssl rand -hex 12 > "$SECRET_DIR"/"$filename"
done