Change secrets that support _FILE

This commit is contained in:
Akumatic 2025-04-17 20:10:40 +02:00
parent 4c650f81f6
commit ca4c0710f6

View File

@ -18,17 +18,18 @@ services:
- internal - internal
- proxy - proxy
environment: environment:
# Not working with secrets right now POSTGRES_DB_FILE: /run/secrets/db_name
POSTGRES_DB: ${DATABASE} POSTGRES_USER_FILE: /run/secrets/db_user
POSTGRES_USER: ${DATABASE_USER} POSTGRES_PASSWORD_FILE: /run/secrets/db_pass
POSTGRES_PASSWORD: ${DATABASE_PASS}
# Backend ENV Variables
DB_ENGINE: postgres DB_ENGINE: postgres
POSTGRES_SERVER: db_pg17 POSTGRES_SERVER: db_pg17
POSTGRES_PORT: 5432 POSTGRES_PORT: 5432
ALLOW_SIGNUP: False ALLOW_SIGNUP: False
TZ: Europe/Berlin TZ: Europe/Berlin
SMTP_HOST_FILE: /run/secrets/smtp_host
SMTP_PORT: 587 SMTP_PORT: 587
SMTP_USER_FILE: /run/secrets/smtp_user
SMTP_PASSWORD_FILE: /run/secrets/smtp_pass
SMTP_FROM_NAME: Mealie SMTP_FROM_NAME: Mealie
SMTP_AUTH_STRATEGY: TLS SMTP_AUTH_STRATEGY: TLS
OIDC_AUTH_ENABLED: True OIDC_AUTH_ENABLED: True
@ -37,20 +38,23 @@ services:
OIDC_REMEMBER_ME: True OIDC_REMEMBER_ME: True
OIDC_USER_CLAIM: email OIDC_USER_CLAIM: email
OIDC_NAME_CLAIM: name OIDC_NAME_CLAIM: name
OIDC_USER_GROUP: mealie_user
OIDC_ADMIN_GROUP: mealie_admin
OIDC_CLIENT_SECRET_FILE: /run/secrets/oidc_client_secret
OIDC_CLIENT_ID_FILE: /run/secrets/oidc_client_id
OIDC_CONFIGURATION_URL_FILE: /run/secrets/oidc_url
secrets: secrets:
- POSTGRES_DB - db_name
- POSTGRES_USER - db_user
- POSTGRES_PASSWORD - db_pass
- BASE_URL - BASE_URL
- SMTP_HOST - smtp_host
- SMTP_FROM_EMAIL - SMTP_FROM_EMAIL
- SMTP_USER - smtp_user
- SMTP_PASSWORD - smtp_pass
- OIDC_CONFIGURATION_URL - oidc_url
- OIDC_CLIENT_ID - oidc_client_id
- OIDC_CLIENT_SECRET - oidc_client_secret
- OIDC_USER_GROUP
- OIDC_ADMIN_GROUP
db_pg17: db_pg17:
image: postgres:17.4 image: postgres:17.4
@ -67,13 +71,13 @@ services:
networks: networks:
- internal - internal
environment: environment:
- POSTGRES_DB_FILE=/run/secrets/POSTGRES_DB - POSTGRES_DB_FILE=/run/secrets/db_name
- POSTGRES_USER_FILE=/run/secrets/POSTGRES_USER - POSTGRES_USER_FILE=/run/secrets/db_user
- POSTGRES_PASSWORD_FILE=/run/secrets/POSTGRES_PASSWORD - POSTGRES_PASSWORD_FILE=/run/secrets/POSTGRES_PASSWORD
secrets: secrets:
- POSTGRES_DB - db_name
- POSTGRES_USER - db_user
- POSTGRES_PASSWORD - db_pass
volumes: volumes:
data: data:
@ -89,29 +93,25 @@ networks:
external: true external: true
secrets: secrets:
POSTGRES_DB: db_name:
file: /srv/docker/secrets/mealie/db/name.txt file: /srv/docker/secrets/mealie/db/name.txt
POSTGRES_USER: db_user:
file: /srv/docker/secrets/mealie/db/user.txt file: /srv/docker/secrets/mealie/db/user.txt
POSTGRES_PASSWORD: db_pass:
file: /srv/docker/secrets/mealie/db/pass.key file: /srv/docker/secrets/mealie/db/pass.key
BASE_URL: BASE_URL:
file: /srv/docker/secrets/mealie/base_url.txt file: /srv/docker/secrets/mealie/base_url.txt
SMTP_FROM_EMAIL: SMTP_FROM_EMAIL:
file: /srv/docker/secrets/mealie/mail_from.txt file: /srv/docker/secrets/mealie/mail_from.txt
SMTP_HOST: smtp_host:
file: /srv/docker/secrets/mail/host.txt file: /srv/docker/secrets/mail/host.txt
SMTP_USER: smtp_user:
file: /srv/docker/secrets/mail/user.txt file: /srv/docker/secrets/mail/user.txt
SMTP_PASSWORD: smtp_pass:
file: /srv/docker/secrets/mail/pass.key file: /srv/docker/secrets/mail/pass.key
OIDC_CONFIGURATION_URL: oidc_url:
file: /srv/docker/secrets/mealie/oidc/url.txt file: /srv/docker/secrets/mealie/oidc/url.txt
OIDC_CLIENT_ID: oidc_client_id:
file: /srv/docker/secrets/mealie/oidc/client_id.txt file: /srv/docker/secrets/mealie/oidc/client_id.txt
OIDC_CLIENT_SECRET: oidc_client_secret:
file: /srv/docker/secrets/mealie/oidc/client_secret.key file: /srv/docker/secrets/mealie/oidc/client_secret.key
OIDC_USER_GROUP:
file: /srv/docker/secrets/mealie/oidc/group_user.txt
OIDC_ADMIN_GROUP:
file: /srv/docker/secrets/mealie/oidc/group_admin.txt