Tiger MCP

# Docker Secrets for Tiger MCP This directory contains Docker secrets for production deployment. **Never commit actual secret files to version control.** ## Required Files Create these files with secure values for production: ### `postgres_password.txt` ```bash # Generate a secure PostgreSQL password openssl rand -base64 32 > postgres_password.txt ``` ### `redis_password.txt` ```bash # Generate a secure Redis password openssl rand -base64 32 > redis_password.txt ``` ### `secret_key.txt` ```bash # Generate a secure application secret key openssl rand -base64 64 > secret_key.txt ``` ### `tiger_private_key.pem` ```bash # Copy your Tiger Brokers private key cp /path/to/your/tiger_private_key.pem . chmod 600 tiger_private_key.pem ``` ## SSL Certificates (Optional) If using custom SSL certificates, also create: ### `server.crt` ```bash # Copy your SSL certificate cp /path/to/your/server.crt ../docker/ssl/ ``` ### `server.key` ```bash # Copy your SSL private key cp /path/to/your/server.key ../docker/ssl/ chmod 600 ../docker/ssl/server.key ``` ## Security Notes 1. **File Permissions**: Ensure secret files have restricted permissions: ```bash chmod 600 *.txt *.pem ``` 2. **Gitignore**: The `.gitignore` file should exclude this directory: ``` secrets/*.txt secrets/*.pem secrets/*.key secrets/*.crt ``` 3. **Production**: Use a proper secrets management system (AWS Secrets Manager, HashiCorp Vault, etc.) in production. 4. **Rotation**: Regularly rotate all secrets and passwords. ## Quick Setup Script ```bash #!/bin/bash # Generate all required secrets echo "Generating Docker secrets..." # PostgreSQL password openssl rand -base64 32 > postgres_password.txt echo "✓ Generated postgres_password.txt" # Redis password openssl rand -base64 32 > redis_password.txt echo "✓ Generated redis_password.txt" # Application secret key openssl rand -base64 64 > secret_key.txt echo "✓ Generated secret_key.txt" # Set restrictive permissions chmod 600 *.txt echo "✓ Set secure file permissions" echo "" echo "⚠️ Still needed:" echo " - Copy your Tiger private key to tiger_private_key.pem" echo " - Configure SSL certificates if needed" echo " - Update production environment variables" ```