fix(linkwarden): discard secrets for now

Environment= keys in quadlets are populated before Secret= is added to
the container environment, I think. This may be why the podman secret
for the db pw is empty in the database url string.

EnvironmentFile will probably have the same issue, so right now my poc
system is using the password in plaintext. plsfix
This commit is contained in:
redbeardymcgee 2024-12-14 18:53:05 -06:00
parent e53777d871
commit 4d176c2277

View file

@ -1,6 +1,6 @@
[Unit]
Description=Linkwarden database
Requires=linkwarden-database.service
Wants=linkwarden.service
[Service]
Restart=on-failure
@ -11,12 +11,10 @@ WantedBy=default.target
[Container]
Image=docker.io/postgres:16-alpine
ContainerName=linkwarden
HostName=linkwarden
ContainerName=linkwarden-database
HostName=linkwarden-database
Volume=linkwarden-database:/var/lib/postgresql/data
Environment=DATABASE_URL=postgresql://postgres:${POSTGRES_PASSWORD}@postgres:5432/postgres
EnvironmentFile=linkwarden.env
# FIXME: Secret is not injected into env before Environment parses
Secret=linkwarden-db-pw,type=env,target=POSTGRES_PASSWORD