diff --git a/stacks/vault/main.tf b/stacks/vault/main.tf index 559fcc98..36a7ffea 100644 --- a/stacks/vault/main.tf +++ b/stacks/vault/main.tf @@ -617,6 +617,7 @@ resource "vault_database_secret_backend_connection" "postgresql" { "pg-wealthfolio-sync", "pg-fire-planner", "pg-postiz", "pg-instagram-poster", "pg-recruiter-responder", + "pg-matrix", "pg-technitium", ] postgresql { @@ -813,6 +814,22 @@ resource "vault_database_secret_backend_static_role" "pg_recruiter_responder" { rotation_period = 604800 } +resource "vault_database_secret_backend_static_role" "pg_matrix" { + backend = vault_mount.database.path + db_name = vault_database_secret_backend_connection.postgresql.name + name = "pg-matrix" + username = "matrix" + rotation_period = 86400 +} + +resource "vault_database_secret_backend_static_role" "pg_technitium" { + backend = vault_mount.database.path + db_name = vault_database_secret_backend_connection.postgresql.name + name = "pg-technitium" + username = "technitium" + rotation_period = 604800 +} + # ============================================================================= # Kubernetes Secrets Engine — Dynamic K8s Credentials # =============================================================================