Ionize Documentation What is Ionize Architecture Repo Map License Glossary

Dashboard API Authentication Dashboard API Errors Dashboard API Pagination Dashboard Settings API SDK Settings API

Environment variables

Secrets catalog ENCRYPTION_KEY SESSION_SIGNING_KEY CIAM_RELOAD_API_KEY IAM_RELOAD_API_KEY CIAM_KRATOS_COOKIE_SECRET IAM_KRATOS_COOKIE_SECRET CIAM_KRATOS_CIPHER_SECRET IAM_KRATOS_CIPHER_SECRET CIAM_HYDRA_SYSTEM_SECRET IAM_HYDRA_SYSTEM_SECRET SMTP_USER / SMTP_PASSWORD TURNSTILE_SECRET_KEY DATABASE_URL Postgres CA certificate DEPLOY_SSH_KEY GHCR pull token Deploy provider tokens

ReferenceSecrets

DEPLOY_SSH_KEY

GitHub Actions deploy SSH key for the VPS.

Secret: `DEPLOY_SSH_KEY`

Purpose: GitHub Actions deploy SSH key for the VPS.

Source: GitHub Secrets

Rotation runbook: [regenerate via Deploy / ssh-keygen](regenerate via Deploy / ssh-keygen)

How it's used

Loaded at container startup. Failure to read the secret usually causes a fatal startup error.

How to rotate

See the linked runbook above. Most secrets have a documented zero-downtime rotation procedure.

Related

Security — Secrets management — full inventory.
Operate — Secrets audit — quarterly cadence.

Postgres CA certificate

TLS verify-full root cert.

GHCR pull token

Pull private images from GHCR.

On this page

Secret: DEPLOY_SSH_KEYHow it's used How to rotate Related