diff --git a/docs/self-hosting/reference-architectures/google-cloud-run.mdx b/docs/self-hosting/reference-architectures/google-cloud-run.mdx index b06bf36a7..6c0a66e47 100644 --- a/docs/self-hosting/reference-architectures/google-cloud-run.mdx +++ b/docs/self-hosting/reference-architectures/google-cloud-run.mdx @@ -11,13 +11,13 @@ It is intended to provide a scalable, secure, and production-ready baseline for - **Cloud Run:** Infisical backend and frontend services are containerized and deployed as fully managed Cloud Run services. -- **Cloud SQL:** Infisical uses Postgres as it's persistence layer. As such, Cloud SQL for PostgresSQL is used. +- **Cloud SQL:** Infisical uses Postgres as its persistence layer. As such, Cloud SQL for PostgresSQL is used. - **MemoryStore for Redis:** To enhance performance, Infisical requires Redis. ## Securing Infisical's root credential -- **Secrets Manager:** To secure Infisical’s root credentials (database connection string, encryption key, etc), +- **Secrets Manager:** To secure Infisical’s root credentials (database connection string, encryption key, etc.), we highly recommend that you use Google Secrets Manager and only allow the tasks running Infisical to access them. ## High Availability and Scalability @@ -66,15 +66,24 @@ This architecture leverages Google Cloud's managed services to achieve high avai Visit [Docker Hub](https://hub.docker.com/r/infisical/infisical/tags) and select a version of Infisical image you would like to deploy. - Then, within Cloud Run, paste the url of the specific Infisical Docker image you would like to use within the `Container image URL` field. + Then, within Cloud Run, paste the URL of the specific Infisical Docker image you would like to use within the `Container image URL` field. ![Cloud Run container image settings UI](/images/self-hosting/reference-architectures/google-cloud-run/cloud-run-container-image.png) Remember to replace `` with the docker image tag of your choice. - For a minimal installation of Infisical, you must configure `ENCRYPTION_KEY`, `AUTH_SECRET`, `DB_CONNECTION_URI`, `SITE_URL`, and `REDIS_URL`. [View all available configurations](/self-hosting/configuration/envars). - + For a minimal installation of Infisical, you must configure the following environment variables: + + ```bash + ENCRYPTION_KEY= + AUTH_SECRET= + DB_CONNECTION_URI="" + SITE_URL="" + REDIS_URL="" + ``` + [View all available configurations](/self-hosting/configuration/envars). + You will want to setup Postgres and Redis within Google Cloud Platform to connect to Infisical. Once you have added the required environment variables to the `Environment Variables` section within Cloud Run, @@ -99,7 +108,7 @@ This architecture leverages Google Cloud's managed services to achieve high avai ![Cloud Run container network settings UI](/images/self-hosting/reference-architectures/google-cloud-run/container-network-configuration.png) - Once the container is running, verify the installation by opening your web browser and navigating to the site url. + Once the container is running, verify the installation by opening your web browser and navigating to the Site URL.