From 4d176c22774122408057b37c192675221e7d14d5 Mon Sep 17 00:00:00 2001 From: redbeardymcgee Date: Sat, 14 Dec 2024 18:53:05 -0600 Subject: [PATCH] fix(linkwarden): discard secrets for now Environment= keys in quadlets are populated before Secret= is added to the container environment, I think. This may be why the podman secret for the db pw is empty in the database url string. EnvironmentFile will probably have the same issue, so right now my poc system is using the password in plaintext. plsfix --- quadlets/linkwarden/linkwarden-database.container | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/quadlets/linkwarden/linkwarden-database.container b/quadlets/linkwarden/linkwarden-database.container index 41a44d3..3ed0f9f 100644 --- a/quadlets/linkwarden/linkwarden-database.container +++ b/quadlets/linkwarden/linkwarden-database.container @@ -1,6 +1,6 @@ [Unit] Description=Linkwarden database -Requires=linkwarden-database.service +Wants=linkwarden.service [Service] Restart=on-failure @@ -11,12 +11,10 @@ WantedBy=default.target [Container] Image=docker.io/postgres:16-alpine -ContainerName=linkwarden -HostName=linkwarden +ContainerName=linkwarden-database +HostName=linkwarden-database Volume=linkwarden-database:/var/lib/postgresql/data -Environment=DATABASE_URL=postgresql://postgres:${POSTGRES_PASSWORD}@postgres:5432/postgres +EnvironmentFile=linkwarden.env -# FIXME: Secret is not injected into env before Environment parses -Secret=linkwarden-db-pw,type=env,target=POSTGRES_PASSWORD