Modules

PawSQL

PawSQL accepts PostgreSQL traffic and maps domains and routes from the Barkfile. One cluster-wide PawSQL service joins barkstack-system plus the project overlays it serves; project PostgreSQL services remain private to their own overlays. Barkstack exposes PawSQL on port 5432 and connects its admin plugin to the Console.

TreatVault

TreatVault keeps a source-of-truth file encrypted with age, then creates and rotates versioned Docker Swarm secrets for labeled consumers. Define each secret’s group and labels in the Barkfile; the Console groups secrets and renders their labels without exposing values.

treatvault {
  file /srv/barkstack/secrets.age
  identity_secret treatvault_identity

  secret campbellwireless_database_password {
    group "Campbell Wireless"
    label project campbellwireless
    label kind postgres
  }
}