Athena — mahmoud-consultancy/archive/old-docs/GITHUB_SECRETS_VALUES.md

🔒 GitHub Secrets - Generated Values

⚠️ SECURITY WARNING: DO NOT COMMIT THIS FILE TO GIT Date Generated: October 8, 2025


📋 Backend Secrets

JWT_SECRET

AhWWNVd/yhBze4VoEHcCzRwXly8gneXkSQNPJl7zvj/YSxdIqZ8cFaBRjUezTDfw
PqK0TYTGkd4JXEWw2LqSBQ==

POSTGRES_PASSWORD

Nd3rs2Rqbwfw0KMjwfVhUiNzihjl+FccLSEL7k2FAJ0=

MAIL_PASSWORD

IDl17+qGLTdg3KSSs6jkbsyyCMMOXBqWrFo/7341kZc=

REDIS_PASSWORD

ffXY+hPdqCK8tOC5VKrFRro/nAXimHx5k4ph617JsIw=

MINIO_ROOT_PASSWORD

4QjR467myS3tv7W9XEkoOQIdWF/Hoyj/d6XlK7GdvCo=

🚀 Deployment Secrets

VPS_HOST

136.144.174.219

VPS_USERNAME

deploy

VPS_SSH_KEY

Action Required: Generate SSH key pair:

ssh-keygen -t ed25519 -C "glorylabs-deploy" -f ~/.ssh/glorylabs_deploy

Then use the private key content from ~/.ssh/glorylabs_deploy

DOCKER_USERNAME

glorylabs

DOCKER_PASSWORD

Action Required: Docker Hub access token or password


🚀 API Keys

FIRECRAWL_API_KEY

fc-9e8a47f30432410aa1a3cf0dc4cddc76

FIRECRAWL_ENABLED

true

📝 GitHub Secrets Configuration Commands

Use GitHub CLI (gh) or GitHub web interface:

Using GitHub CLI:

# Backend secrets
gh secret set JWT_SECRET --body "AhWWNVd/yhBze4VoEHcCzRwXly8gneXkSQNPJl7zvj/YSxdIqZ8cFaBRjUezTDfwPqK0TYTGkd4JXEWw2LqSBQ=="
gh secret set POSTGRES_PASSWORD --body "Nd3rs2Rqbwfw0KMjwfVhUiNzihjl+FccLSEL7k2FAJ0="
gh secret set MAIL_PASSWORD --body "IDl17+qGLTdg3KSSs6jkbsyyCMMOXBqWrFo/7341kZc="
gh secret set REDIS_PASSWORD --body "ffXY+hPdqCK8tOC5VKrFRro/nAXimHx5k4ph617JsIw="
gh secret set MINIO_ROOT_PASSWORD --body "4QjR467myS3tv7W9XEkoOQIdWF/Hoyj/d6XlK7GdvCo="

# Deployment secrets
gh secret set VPS_HOST --body "136.144.174.219"
gh secret set VPS_USERNAME --body "deploy"
gh secret set FIRECRAWL_API_KEY --body "fc-9e8a47f30432410aa1a3cf0dc4cddc76"
gh secret set FIRECRAWL_ENABLED --body "true"

# SSH key (after generation)
gh secret set VPS_SSH_KEY < ~/.ssh/glorylabs_deploy

# Docker credentials (replace with actual values)
gh secret set DOCKER_USERNAME --body "glorylabs"
gh secret set DOCKER_PASSWORD --body "YOUR_DOCKER_PASSWORD"

🔐 VPS .env File

Create this file on the VPS at /opt/glorylabs/.env:

# Backend Configuration
JWT_SECRET=AhWWNVd/yhBze4VoEHcCzRwXly8gneXkSQNPJl7zvj/YSxdIqZ8cFaBRjUezTDfwPqK0TYTGkd4JXEWw2LqSBQ==
FIRECRAWL_API_KEY=fc-9e8a47f30432410aa1a3cf0dc4cddc76
FIRECRAWL_ENABLED=true

# Database
POSTGRES_DB=recruitment_production
POSTGRES_USER=recruitment
POSTGRES_PASSWORD=Nd3rs2Rqbwfw0KMjwfVhUiNzihjl+FccLSEL7k2FAJ0=

# Redis
REDIS_PASSWORD=ffXY+hPdqCK8tOC5VKrFRro/nAXimHx5k4ph617JsIw=

# MinIO
MINIO_ROOT_USER=admin
MINIO_ROOT_PASSWORD=4QjR467myS3tv7W9XEkoOQIdWF/Hoyj/d6XlK7GdvCo=

# Email
MAIL_USERNAME=noreply@glorylabs.nl
MAIL_PASSWORD=IDl17+qGLTdg3KSSs6jkbsyyCMMOXBqWrFo/7341kZc=
MAIL_HOST=smtp.gmail.com
MAIL_PORT=587

# Application
SPRING_PROFILES_ACTIVE=production
APP_URL=https://platform.glorylabs.nl
API_URL=https://api.glorylabs.nl

🔒 Security Notes

  1. ✅ All passwords are cryptographically random (32+ bytes)
  2. ✅ JWT secret is 64 bytes (512 bits)
  3. ⚠️ DELETE THIS FILE after configuring secrets
  4. ⚠️ NEVER COMMIT this file to Git
  5. ⚠️ Rotate secrets every 90 days
  6. ⚠️ Use different passwords for each service

📊 Secrets Checklist

  • [ ] JWT_SECRET configured
  • [ ] POSTGRES_PASSWORD configured
  • [ ] MAIL_PASSWORD configured
  • [ ] REDIS_PASSWORD configured
  • [ ] MINIO_ROOT_PASSWORD configured
  • [ ] VPS_HOST configured
  • [ ] VPS_USERNAME configured
  • [ ] VPS_SSH_KEY generated and configured
  • [ ] DOCKER_USERNAME configured
  • [ ] DOCKER_PASSWORD configured
  • [ ] FIRECRAWL_API_KEY configured
  • [ ] VPS .env file created

Generated: October 8, 2025 CONFIDENTIAL - FOR DEPLOYMENT USE ONLY

Reacties

Nog geen reacties