Files

T

Clément Désiles 7972fe09ad security: deploy pod manifests containing credentials with mode 0600

gitea.yaml, immich.yaml, and metabase.yaml embed database passwords in
env vars; per repo policy, rendered files containing secrets must not
be world-readable.

2026-07-04 00:06:29 +02:00

defaults

feat: add metabase role

2026-06-03 10:01:00 +02:00

handlers

feat: add metabase role

2026-06-03 10:01:00 +02:00

README.md

Metabase

Business intelligence and analytics. Defaults: defaults/main.yml.

Requirements

podman role
postgres role
nginx role (optional, for public access)

Usage

Set in inventory:

metabase_postgres_password: "strongpassword"
metabase_postgres_host: "{{ podman_gw_gateway }}"
metabase_nginx_enabled: true
metabase_nginx_hostname: metabase.example.com