feat: rebuild xiteng.site homelab platform

2026-08-12 09:48:25 +08:00
parent 557b0eca33
commit 5b84988789
128 changed files with 14979 additions and 292 deletions
@@ -0,0 +1,9 @@
+# Runtime secrets
+
+`../../homelab-emergency init-secrets` creates these untracked files:
+
+- `vault_master_key`: 32-byte base64 key used only to wrap per-credential data keys.
+- `portal_gateway_hmac`: 32-byte base64 key used to authenticate Portal-to-Gateway requests.
+
+Back up both outside this repository. Never store either key in `vault.db`, Authentik, Docker labels,
+or the Portal UI.