diff --git a/morph/README.rst b/morph/README.rst index d4a89a373a1bef767ad26859d495f1528a4fb7ca..1f48d5e0ad30b1f44a1a2cee8c5aa6f0669bcc75 100644 --- a/morph/README.rst +++ b/morph/README.rst @@ -42,6 +42,19 @@ grid Specific grid definitions live in subdirectories beneath this directory. +secrets +~~~~~~~ + +This must be created and populated before the grid can be built or deployed. + +This directory contains all of the secrets necessary to deploy the grid. +Secrets beneath this directory are referenced by ``config.json`` and ``grid.nix`` +(and possibly elsewhere). +Some of the paths are configurable and some are just convention. +This path is **ignored** by git. +The intended workflow is that the secrets will be maintained on secure storage and a symlink to the correct location created here. +This keeps the secrets themselves out of the git working tree as an extra protection against unintentionally committing them. + config.json ~~~~~~~~~~~ diff --git a/morph/grid/production/.gitignore b/morph/grid/production/.gitignore new file mode 100644 index 0000000000000000000000000000000000000000..db2fc0de62d01d6d7eec83f8f3e8c3b13b20392a --- /dev/null +++ b/morph/grid/production/.gitignore @@ -0,0 +1 @@ +secrets diff --git a/morph/grid/production/secrets b/morph/grid/production/secrets deleted file mode 120000 index 523a2201861c0af15e630324fb0a59230751c442..0000000000000000000000000000000000000000 --- a/morph/grid/production/secrets +++ /dev/null @@ -1 +0,0 @@ -../../../../PrivateStorageSecrets/ \ No newline at end of file diff --git a/morph/grid/testing/.gitignore b/morph/grid/testing/.gitignore new file mode 100644 index 0000000000000000000000000000000000000000..db2fc0de62d01d6d7eec83f8f3e8c3b13b20392a --- /dev/null +++ b/morph/grid/testing/.gitignore @@ -0,0 +1 @@ +secrets diff --git a/morph/grid/testing/secrets b/morph/grid/testing/secrets deleted file mode 120000 index 523a2201861c0af15e630324fb0a59230751c442..0000000000000000000000000000000000000000 --- a/morph/grid/testing/secrets +++ /dev/null @@ -1 +0,0 @@ -../../../../PrivateStorageSecrets/ \ No newline at end of file