feat: 重构基础设施配置与安全凭证管理
- 新增多个云服务商配置文件(OCI、阿里云) - 重构Vault、Consul、Nomad等服务的部署配置 - 新增备份与恢复完美状态的脚本 - 更新安全凭证管理文档 - 优化Traefik动态配置 - 删除过时的脚本和配置文件 重构后的配置支持多区域部署,优化了服务发现和负载均衡机制,并完善了安全凭证的备份与恢复流程。
This commit is contained in:
17
backup/PERFECT_STATE/secrets-PERFECT/vault-cluster-info.txt
Normal file
17
backup/PERFECT_STATE/secrets-PERFECT/vault-cluster-info.txt
Normal file
@@ -0,0 +1,17 @@
|
||||
# Vault集群信息
|
||||
# 集群ID和相关信息
|
||||
|
||||
Cluster ID: 51c8055a-33f7-3fab-307f-302d3239e708
|
||||
Cluster Name: vault-cluster
|
||||
Version: Vault v1.20.4
|
||||
Build Date: 2025-09-23T13:22:38Z
|
||||
Storage Type: consul
|
||||
HA Enabled: true
|
||||
|
||||
# 节点信息:
|
||||
# - warden.tailnet-68f9.ts.net:8200 (Primary)
|
||||
# - ch4.tailnet-68f9.ts.net:8200 (Standby)
|
||||
# - ash3c.tailnet-68f9.ts.net:8200 (Standby)
|
||||
|
||||
# 初始化时间:2025-10-11T06:00:47Z
|
||||
# 解封时间:2025-10-11T06:02:38Z
|
||||
18
backup/PERFECT_STATE/secrets-PERFECT/vault-root-token.txt
Normal file
18
backup/PERFECT_STATE/secrets-PERFECT/vault-root-token.txt
Normal file
@@ -0,0 +1,18 @@
|
||||
# Vault Root Token (重新初始化后)
|
||||
# 这是Vault的根令牌,拥有完全的管理权限
|
||||
# 请妥善保管,不要泄露给未授权人员
|
||||
|
||||
hvs.2clh6ZLlkvvVsO9qzR1Cqb2r
|
||||
|
||||
# 使用说明:
|
||||
# export VAULT_TOKEN=hvs.2clh6ZLlkvvVsO9qzR1Cqb2r
|
||||
# vault auth -address=http://warden.tailnet-68f9.ts.net:8200
|
||||
|
||||
# 安全提醒:
|
||||
# - 此令牌拥有Vault的完全访问权限
|
||||
# - 建议在生产环境中创建具有特定权限的用户和策略
|
||||
# - 定期轮换此令牌
|
||||
# - 不要将此令牌提交到版本控制系统
|
||||
|
||||
# 初始化时间:2025-10-12 10:08 UTC
|
||||
# 初始化节点:warden.tailnet-68f9.ts.net:8200
|
||||
28
backup/PERFECT_STATE/secrets-PERFECT/vault-unseal-keys.txt
Normal file
28
backup/PERFECT_STATE/secrets-PERFECT/vault-unseal-keys.txt
Normal file
@@ -0,0 +1,28 @@
|
||||
# Vault Unseal Keys (重新初始化后)
|
||||
# 这些密钥用于解封Vault实例
|
||||
# 需要至少3个密钥才能解封Vault
|
||||
|
||||
# 新生成的密钥分片 (2025-10-12 10:08 UTC)
|
||||
# Unseal Key 1
|
||||
/cmtMNRLgfqUv7g9vZWmkFY5d/cBKvFImJDloN6h58or
|
||||
|
||||
# Unseal Key 2
|
||||
/jCGo0LIGXrXhsrjLw8TyIoKAZStoSmqRFtZQ0tDPtzv
|
||||
|
||||
# Unseal Key 3
|
||||
3kOn8gah1fs6cHnVDJ/6F22b2ERTS+YmKRKJS2ZQhlPS
|
||||
|
||||
# Unseal Key 4
|
||||
PpdE86C6FyW192CqKlwMnP3g1VZv4solNLzP27jse+GD
|
||||
|
||||
# Unseal Key 5
|
||||
T4BqN/Np/g/Rtf9vaGkyn5U/TbQau8SatTp1vJdftKh1
|
||||
|
||||
# 使用说明:
|
||||
# vault operator unseal -address=http://warden.tailnet-68f9.ts.net:8200 <key>
|
||||
# 需要提供至少3个不同的密钥才能完全解封Vault
|
||||
|
||||
# 安全提醒:
|
||||
# - 请妥善保管这些密钥,不要泄露给未授权人员
|
||||
# - 建议将密钥分发给不同的管理员
|
||||
# - 不要将这些密钥提交到版本控制系统
|
||||
@@ -0,0 +1,15 @@
|
||||
{
|
||||
"unseal_keys_b64": [
|
||||
"euXkiaLFbBhb4uSRbtdNQ18eIYRdSvhPmO/TVR4CCEY="
|
||||
],
|
||||
"unseal_keys_hex": [
|
||||
"7ae5e489a2c56c185be2e4916ed74d435f1e21845d4af84f98efd3551e020846"
|
||||
],
|
||||
"unseal_shares": 1,
|
||||
"unseal_threshold": 1,
|
||||
"recovery_keys_b64": [],
|
||||
"recovery_keys_hex": [],
|
||||
"recovery_keys_shares": 0,
|
||||
"recovery_keys_threshold": 0,
|
||||
"root_token": "hvs.A5Fu4E1oHyezJapVllKPFsWg"
|
||||
}
|
||||
@@ -0,0 +1,2 @@
|
||||
export VAULT_ADDR='http://100.117.106.136:8200'
|
||||
export VAULT_TOKEN='hvs.A5Fu4E1oHyezJapVllKPFsWg'
|
||||
Reference in New Issue
Block a user