Infisical

.01_README.md

Infisical

Secrets vault, CLI/CI, keys, certificates
https://github.com/Infisical/infisical

docker-compose.yml https://github.com/Infisical/infisical/blob/main/docker-compose.prod.yml

services:
  backend:
    container_name: infisical-backend
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_started
    image: infisical/infisical:v0.162.6
    pull_policy: always
    env_file: .env
    environment:
      - NODE_ENV=production
    networks:
      - infisical
      - shared-net

  redis:
    image: redis
    container_name: infisical-dev-redis
    env_file: .env
    restart: unless-stopped
    environment:
      - ALLOW_EMPTY_PASSWORD=yes
    networks:
      - infisical
    volumes:
      - ./redis_data:/data

  db:
    container_name: infisical-db
    image: postgres:14-alpine
    restart: unless-stopped
    env_file: .env
    volumes:
      - ./pg_data:/var/lib/postgresql/data
    networks:
      - infisical
    healthcheck:
      test: "pg_isready --username=${POSTGRES_USER} && psql --username=${POSTGRES_USER} --list"
      interval: 5s
      timeout: 10s
      retries: 10

volumes:
  pg_data:
    driver: local
  redis_data:
    driver: local

networks:
  infisical:
    name: infisical-subnet
  shared-net:
    external: true

.env https://github.com/Infisical/infisical/blob/main/.env.example

# Keys
# Required key for platform encryption/decryption ops
ENCRYPTION_KEY=abc123

# JWT
# Required secrets to sign JWT tokens
AUTH_SECRET=abc/123=

# Postgres creds
POSTGRES_PASSWORD=abcNot#
POSTGRES_USER=infisical
POSTGRES_DB=infisical

# Required
DB_CONNECTION_URI=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB}

# Redis
REDIS_URL=redis://redis:6379

# Website URL
# Required
SITE_URL=https://mysite.mydomain/