hermes/agent-secret-vault
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: point to ~/agent-secret-vault (unified home, ~/projects copy removed)

Browse Source
This commit is contained in:
user.email
2026-08-13 15:56:54 +08:00
parent 2e35c69e78
commit 67f4932ebd
3 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/agent-install-runbook.md
+12 -12
View File
@@ -11,8 +11,8 @@
## 目標路徑
- Repo：`~/projects/agent-secret-vault`
- Vault 檔：`~/projects/agent-secret-vault/secrets/vault.yml`
- Repo：`~/agent-secret-vault`
- Vault 檔：`~/agent-secret-vault/secrets/vault.yml`
- Vault password file：`~/.config/vault-pass.txt`
- 可覆寫環境變數：`VAULT_PASS_FILE=/custom/path`
@@ -45,8 +45,8 @@ cd agent-secret-vault
若 clone 失敗，建立 placeholder 讓後續步驟可明確回報缺什麼：
```bash
mkdir -p ~/projects/agent-secret-vault/{scripts,secrets,docs}
cat > ~/projects/agent-secret-vault/README.PLACEHOLDER.md <<'PLACEHOLDER'
mkdir -p ~/agent-secret-vault/{scripts,secrets,docs}
cat > ~/agent-secret-vault/README.PLACEHOLDER.md <<'PLACEHOLDER'
# Placeholder
agent-secret-vault repo 尚未成功 clone。
@@ -68,7 +68,7 @@ install.env # 安裝用 placeholder
安裝前必須先設定 `install.env`（或指定 `INSTALL_ENV_FILE`），不要跳過這一步：
```bash
cd ~/projects/agent-secret-vault
cd ~/agent-secret-vault
cp -n install.env.example install.env
editor install.env
```
@@ -114,7 +114,7 @@ INSTALL_ENV_FILE=install.local.env ./scripts/install-vault-pass.sh
執行 installer 前再次確認 env，然後安裝：
```bash
cd ~/projects/agent-secret-vault
cd ~/agent-secret-vault
./scripts/install-vault-pass.sh --check-env
./scripts/install-vault-pass.sh
```
@@ -151,8 +151,8 @@ installer 會先判斷 `~/.config/vault-pass.txt` 是否已存在：
建立 placeholder，不要自行編造密碼：
```bash
mkdir -p ~/projects/agent-secret-vault/secrets
cat > ~/projects/agent-secret-vault/secrets/vault-pass.txt.zip.PLACEHOLDER <<'PLACEHOLDER'
mkdir -p ~/agent-secret-vault/secrets
cat > ~/agent-secret-vault/secrets/vault-pass.txt.zip.PLACEHOLDER <<'PLACEHOLDER'
Missing file: secrets/vault-pass.txt.zip
Purpose: password-protected archive containing vault-pass.txt
Action: ask human maintainer to provide this archive or use installer method 1/2/3.
@@ -202,7 +202,7 @@ VAULT_PASS_CONTENT="..." \
## 4. 驗證安裝
```bash
cd ~/projects/agent-secret-vault
cd ~/agent-secret-vault
ansible-vault view secrets/vault.yml --vault-password-file ~/.config/vault-pass.txt >/dev/null
```
@@ -211,7 +211,7 @@ ansible-vault view secrets/vault.yml --vault-password-file ~/.config/vault-pass.
## 5. 讀取單一 secret
```bash
cd ~/projects/agent-secret-vault
cd ~/agent-secret-vault
./scripts/get-secret.sh <dot.path>
```
@@ -227,7 +227,7 @@ cd ~/projects/agent-secret-vault
## 6. Worker 需要 env 時
```bash
cd ~/projects/agent-secret-vault
cd ~/agent-secret-vault
umask 077
./scripts/render-env.sh gitea > /tmp/gitea.env
set -a
@@ -243,7 +243,7 @@ rm -f /tmp/gitea.env
只有在人類明確要求更新 secrets 時才做：
```bash
cd ~/projects/agent-secret-vault
cd ~/agent-secret-vault
git pull --ff-only
./scripts/vault.sh edit
ansible-vault view secrets/vault.yml --vault-password-file ~/.config/vault-pass.txt >/dev/null