[doc-staleness] Netgrimoire/Gremlin/Gremlin_Directives.md :: Secrets #8
Labels
No labels
doc-staleness
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
traveler/Netgrimoire#8
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Doc Staleness Report
File:
Netgrimoire/Gremlin/Gremlin_Directives.mdSection:
SecretsSource:
manualRun ID:
20260619-130634-docflag-sec1What changed:
Secrets file is secrets/ with NO extension (not secrets/.yaml), parsed as plain key: value text lines, and substituted as ${VAR} directly into the compose text before deploy. Current pipeline does not create real Docker Swarm secrets via the API for this -- the described 'Recreates Docker secrets on every deploy' / file: path rewriting behavior no longer matches live CI/CD v3 (pipelineVersion v3.2026-06-16-1139) source.
Gemini Draft
File:
secrets/<stackname>intraveler/servicesStack declaration:
${VAR}substituted)/opt/grimoire/secrets/<stackname>/<key>.txtBlocks deploy if secrets file missing or any declared key absent.
Environment Files
File:
environment/<stackname>.envintraveler/servicesStack usage:
${VAR}substituted)/opt/grimoire/env/<stackname>.env, passed via--env-fileBlocks deploy if env file missing.
Backup
gremlin.backup.enablefalsegremlin.backup.cron0 2 * * *gremlin.backup.pathgremlin.backup.script/opt/grimoire/scripts/backup/. Full path → used as-isgremlin.backup.dbsqlite|postgres|mysql|mariadbgremlin.backup.db.namegremlin.backup.db.userpostgresgremlin.backup.db.passwordgremlin.backup.db.pathgremlin.backup.db.containerVolume auto-detection:
/DockerVol/— always included/data/nfs/znas/Docker/<stackname>— included/data/nfs/(other paths) — excluded/etc/,/var/run/— excluded:romounts — excludedScript path resolution:
mailcow-pre.sh→/opt/grimoire/scripts/backup/mailcow-pre.sh/opt/mailcow/backup.sh→/opt/mailcow/backup.shScripts
Numbered directives support multiple scripts per service:
gremlin.script.N.nametraveler/scripts— fetched and deployedgremlin.script.N.pathgremlin.script.N.crongremlin.script.N.runpython3,bash)gremlin.script.N.branchtraveler/scripts(default: deploy branch)nameonly (no path separator) → deployed to/opt/grimoire/scripts/pathwith slashes → used as-isService File Directives (
gremlin/*.yaml)gremlin.namegremlin.hostgremlin.portgremlin.descgremlin.groupServices)gremlin.icongremlin.protocolhttporhttps(default:https)gremlin.authauthentik|authelia|nonegremlin.caddy.skipgremlin.monitor.skipgremlin.backup.enablegremlin.backup.pathgremlin.backup.crongremlin.backup.scriptAll
caddy.*,homepage.*,monitor.*overrides also work in service files.Commit Directives
Override any directive in the commit message — highest priority:
Gremlin Config File
gremlin/config.yamlintraveler/services— pipeline-wide defaults:Pocket overrides in
gremlin/config.yamlintraveler/pocket:Directory Structure Reference
Host Directory Structure