redbeardymcgee/podbox
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

fix(linkwarden): discard secrets for now

Browse source 
Environment= keys in quadlets are populated before Secret= is added to
the container environment, I think. This may be why the podman secret
for the db pw is empty in the database url string.

EnvironmentFile will probably have the same issue, so right now my poc
system is using the password in plaintext. plsfix
This commit is contained in:
redbeardymcgee 2024-12-14 18:53:05 -06:00
parent e53777d871
commit 4d176c2277
1 changed files with 4 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
quadlets/linkwarden/linkwarden-database.container
View file

@ -1,6 +1,6 @@
[Unit] [Unit]
Description=Linkwarden database Description=Linkwarden database
Requires=linkwarden-database.service Wants=linkwarden.service
[Service] [Service]
Restart=on-failure Restart=on-failure
@ -11,12 +11,10 @@ WantedBy=default.target
[Container] [Container]
Image=docker.io/postgres:16-alpine Image=docker.io/postgres:16-alpine
ContainerName=linkwarden ContainerName=linkwarden-database
HostName=linkwarden HostName=linkwarden-database
Volume=linkwarden-database:/var/lib/postgresql/data Volume=linkwarden-database:/var/lib/postgresql/data
Environment=DATABASE_URL=postgresql://postgres:${POSTGRES_PASSWORD}@postgres:5432/postgres EnvironmentFile=linkwarden.env
# FIXME: Secret is not injected into env before Environment parses
Secret=linkwarden-db-pw,type=env,target=POSTGRES_PASSWORD