psa-systems/bunyip
Watch
9
0
Fork
You've already forked bunyip
 0
Code Issues Pull requests 1 Projects Releases 18 Packages Wiki Activity Actions 1

docs(secrets): cross-reference the docker Group-2 Infisical Agent sidecar #519

Closed
nrupard wants to merge 1 commit from docs/DEV-575-infisical-agent-crossref into main
pull from: docs/DEV-575-infisical-agent-crossref
merge into: psa-systems:main
Conversation 0 Commits 1 Files changed 1 +10
nrupard commented 2026-08-12 15:22:12 +02:00
Owner
Copy link

One-line-ish cross-reference so docs/secrets-infisical.md (bunyip's self-host file-secret model) points at the docker deploy's Group-2 mechanism.

Adds a scope note after the "sync, not fetch" paragraph: this doc covers bunyip's own compose.yml; the docker deploy (c-01/nc-01) keeps Group-1 startup secrets in SOPS and renders Group-2 integration secrets (SMTP, later others) at runtime via an Infisical Agent sidecar that the api reads through the same {NAME}_FILE convention - upholding the same sync-not-fetch rule. Links the docker repo runbook (DEV-575).

Docs-only; no code touched.

One-line-ish cross-reference so `docs/secrets-infisical.md` (bunyip's self-host file-secret model) points at the docker deploy's Group-2 mechanism. Adds a scope note after the "sync, not fetch" paragraph: this doc covers bunyip's own `compose.yml`; the docker deploy (c-01/nc-01) keeps Group-1 startup secrets in SOPS and renders Group-2 integration secrets (SMTP, later others) at runtime via an Infisical Agent sidecar that the api reads through the same `{NAME}_FILE` convention - upholding the same sync-not-fetch rule. Links the docker repo runbook (DEV-575). Docs-only; no code touched.
docs(secrets): cross-reference the docker Group-2 Infisical Agent sidecar
All checks were successful
E2E / PR gate (pull_request) Successful in 24s
Details
Check / fmt + clippy + build + tests (pull_request) Successful in 16m49s
Details
Create release / Create release from merged PR (pull_request) Has been skipped
Details
06d5392188 
Note that this document covers bunyip's self-host compose; the docker deploy (c-01/nc-01) keeps Group-1 startup secrets in SOPS and sources Group-2 integration secrets via an Infisical Agent sidecar, which upholds the same sync-not-fetch rule. Points at the docker repo runbook (DEV-575).

#DEV-575

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
nrupard closed this pull request 2026-08-12 16:43:50 +02:00
All checks were successful
E2E / PR gate (pull_request) Successful in 24s
Required
Details
Check / fmt + clippy + build + tests (pull_request) Successful in 16m49s
Required
Details
Create release / Create release from merged PR (pull_request) Has been skipped
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
psa-systems/bunyip!519
No description provided.