Skip to content

Generating SOPS Secrets

[!WARNING] This document is still a work in progress, some secrets are missing.

The oauth2_proxy_cookie_secret is a base64 encoded 32 bit string. This can be generated with the following command:

openssl rand -base64 32

Generating ArgoCD Admin Password

To generate a new admin password and mtime for ArgoCD, use the following commands:

# admin.password
password=`pwgen -s 128 1`
echo -n `htpasswd -bnBC 12 "" $password | cut -d : -f 2`

#admin.passwordMtime
echo -n '2025-11-27T00:00:00:00Z'