diff --git a/src/development/postgraphile/compose.yaml b/src/development/postgraphile/compose.yaml index b8acd655..4d5b270b 100644 --- a/src/development/postgraphile/compose.yaml +++ b/src/development/postgraphile/compose.yaml @@ -46,7 +46,7 @@ services: target: /run/environment-variables/POSTGRAPHILE_OWNER_CONNECTION volumes: - ../../../../postgraphile/:/srv/app/ # dargstack:dev-only - - ./configurations/jwtRS256.key.pub:/run/environment-variables/POSTGRAPHILE_JWT_PUBLIC_KEY:ro + - ./configurations/jwtES256.key.pub:/run/environment-variables/POSTGRAPHILE_JWT_PUBLIC_KEY:ro - pnpm-data:/srv/.pnpm-store/ # dargstack:dev-only - postgraphile-data:/srv/app/node_modules # dargstack:dev-only volumes: @@ -60,6 +60,7 @@ x-dargstack: template: postgres://{{secret:postgres-role-service-postgraphile-username}}:{{secret:postgres-role-service-postgraphile-password}}@postgres:5432/{{secret:postgres-db}} postgraphile-jwt-secret: type: private_key + key_type: ecdsa postgraphile-owner-connection: type: template template: postgres://{{secret:postgres-user}}:{{secret:postgres-password}}@postgres:5432/{{secret:postgres-db}} diff --git a/src/development/postgraphile/configurations/jwtES256.key.pub b/src/development/postgraphile/configurations/jwtES256.key.pub new file mode 100644 index 00000000..e9b2a5e8 --- /dev/null +++ b/src/development/postgraphile/configurations/jwtES256.key.pub @@ -0,0 +1,4 @@ +-----BEGIN PUBLIC KEY----- +MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEgIYyEMm+hZzEnXhJLGUx9lwr3cKs +W2uJ+zLvei380CrUEPARnWQNR/V0usS0EFypTQllniuCpbLG6un87kxh6w== +-----END PUBLIC KEY----- diff --git a/src/development/postgraphile/configurations/jwtRS256.key.pub b/src/development/postgraphile/configurations/jwtRS256.key.pub deleted file mode 100644 index 65de2425..00000000 --- a/src/development/postgraphile/configurations/jwtRS256.key.pub +++ /dev/null @@ -1,14 +0,0 @@ ------BEGIN PUBLIC KEY----- -MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtBuHX2uH5GviLbocSUBK -aRE4iKEjjEoB1eh7VQdBoKi1Wd+DNUilVyCtq0ootPSDR/8yOTa8W396Wu1xm07+ -xDAyFzsilIppu8DNcJo28Gb3PZCm4nXmITPkknVSKf80hosgauoe7itqDxgMASYT -U8CgBH8zXPaowhqzjz0M/T9RqD1mRzMn3NEprDnaVAsh11r3DSandHjsnlgKCf1d -lh4ixCZ6zUhtb0sT6GxuJaGjNVevLbPLuugMTu3d484FwbND+AmpAjIgdnX5lJQn -eT7HxgnaiwLDazSwLM0jmiyEvnrmSPJZ2sgp87XS0VTVwMYk3M3RCy/3RiamJG5v -7qZuVr4L87cXWvLHCwV5dGaPu0Dc3/75lcKcWy+BtBQUI+n+om1EitLtUo+lxE9a -SyG6bhYQNu+XMRwY768TrzrvBwYt5JxoO9y3ybIFzoi/mufkp2NY7XB7CHfMcrn3 -XzCBbXJwt0Zlu2K1R8FPVN0SlsjtOVQun1al9cjC808hihjpiiGpKURoaFsxkh4B -8n2Qli/fl5BQVAPClmFbsvToSzy+ENEDpXc53eve5Dhzx5SB/qe0DwlljDdc2W8n -hozYHaOtnLnhG/TU9mmOliw5jmsHb5m1OMdBXMEhrGv4hkHJNg9+hCSJDzvbFRkN -Y95lZj/fbtFrSHR5WwdsgI8CAwEAAQ== ------END PUBLIC KEY----- diff --git a/src/development/reccoom/compose.yaml b/src/development/reccoom/compose.yaml index 97a254e5..f476237a 100644 --- a/src/development/reccoom/compose.yaml +++ b/src/development/reccoom/compose.yaml @@ -33,7 +33,7 @@ services: - reccoom-openai-api-key volumes: - ../../../../reccoom/:/srv/app/ # dargstack:dev-only - - ../postgraphile/configurations/jwtRS256.key.pub:/run/configurations/jwtRS256.key.pub:ro + - ../postgraphile/configurations/jwtES256.key.pub:/run/configurations/jwtES256.key.pub:ro reccoom_postgres: # You can access reccoom's database via `adminer`. deploy: diff --git a/src/development/vibetype/compose.yaml b/src/development/vibetype/compose.yaml index a2c12f8f..94c380c0 100644 --- a/src/development/vibetype/compose.yaml +++ b/src/development/vibetype/compose.yaml @@ -72,7 +72,7 @@ services: - ../../../artifacts/certificates/:/srv/certificates/ # dargstack:dev-only - ../../../../vibetype/:/srv/app/ # dargstack:dev-only - vibetype-data:/srv/app/node_modules # dargstack:dev-only - - ../postgraphile/configurations/jwtRS256.key.pub:/run/environment-variables/NUXT_PUBLIC_VIO_AUTH_JWT_PUBLIC_KEY:ro + - ../postgraphile/configurations/jwtES256.key.pub:/run/environment-variables/NUXT_PUBLIC_VIO_AUTH_JWT_PUBLIC_KEY:ro volumes: vibetype-data: # The frontend's data. diff --git a/src/production/vibetype/compose.yaml b/src/production/vibetype/compose.yaml index 72d52cd1..164fe583 100644 --- a/src/production/vibetype/compose.yaml +++ b/src/production/vibetype/compose.yaml @@ -48,6 +48,6 @@ services: # - source: postgres-role-service-vibetype-username # target: /run/environment-variables/PGUSER # volumes: - # - ./configurations/postgraphile/jwtRS256.key.pub:/run/environment-variables/NUXT_PUBLIC_VIO_AUTH_JWT_PUBLIC_KEY:ro + # - ./configurations/postgraphile/jwtES256.key.pub:/run/environment-variables/NUXT_PUBLIC_VIO_AUTH_JWT_PUBLIC_KEY:ro volumes: vibetype_data: (( prune ))