k3s/apps/vaultwarden/manifests/vaultwarden-secret.yaml at 3bf3ddd3064c7e734bf2b0dd03a6a379ddb6a811 - k3s - Gitea: Git with a cup of tea

timmy/k3s

Files

Timmy 3bf3ddd306 feat: improve security and stability for Vaultwarden and CodiMD

Security:
- Move Vaultwarden ADMIN_TOKEN to Secret (was plaintext)
- Remove root user execution from CodiMD (runAsUser: 0)
- Use fixed image versions instead of latest tag

Stability:
- Add liveness/readiness probes to Vaultwarden, CodiMD, CodiMD DB
- Add resource requests/limits to all services
- Set appropriate memory/CPU constraints

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-01 17:52:30 +08:00

8 lines

226 B

YAML

Raw Blame History

 apiVersion: v1
 kind: Secret
 metadata:
   name: vaultwarden-secret
 type: Opaque
 stringData:
   ADMIN_TOKEN: "$argon2id$v=19$m=65540,t=3,p=4$EVIbGzNlkQUK5b0r7aMgKoUWV98aqrpPevU+8Bbv0EE$JB51q0ih0LGmw6rp7ZVBgT+PNnCepy+bNYyaChD+VMc"