Support Docker secrets · monicahq/monica#5809

(3 comments) (0 reactions) (0 assignees)PHP (24,641 stars) (2,464 forks)batch import

dockerhelp wanted

Description

Is your feature request related to a problem? Please describe.

Currently the documentation states to use .env files / environment variables to pass secrets to run MonicaHQ with docker compose / docker. I would love to make use of docker secrets: https://docs.docker.com/compose/compose-file/compose-file-v3/#secrets instead of having secret things in my .env file.

Describe the solution you'd like Support docker secrets. Either by adding new environment variables such as DB_PASS_FILE which actually does a cat /run/secrets/DB_PASS_FILE inside the container - or we could have some logic that checks whether /run/secrets/DB_PASS exists and overwrites whatever is in environment variable DB_PASS.

Describe alternatives you've considered (optional) Have my secrets in the .env file

Contributor guide

Tech stack: dockerphp
Domain: backenddevopssecurity
Issue type: feature
Difficulty: 2
Estimated time: 1-3 hours
Activity status: stale
Clarity: clear
Prerequisites: Docker basicsDocker secrets conceptPHP environment variables
Newbie friendliness: 70
Research direction: Investigate the current Docker Compose setup and entrypoint scripts (likely in 'docker/' directory or entrypoint.sh). Determine how environment variables are loaded (probably via a PHP script that parses .env). Implement support for Docker secrets by either adding FILE suffixed variables or checking /run/secrets/ directory. Ensure backwards compatibility and document the change. Consult the Docker documentation for secrets and the MonicaHQ Docker deployment guide.