Support Docker secrets · monicahq/monica#5809

(3 评论) (0 反应) (0 负责人)PHP (24,641 star) (2,464 fork)batch import

dockerhelp wanted

描述

Is your feature request related to a problem? Please describe.

Currently the documentation states to use .env files / environment variables to pass secrets to run MonicaHQ with docker compose / docker. I would love to make use of docker secrets: https://docs.docker.com/compose/compose-file/compose-file-v3/#secrets instead of having secret things in my .env file.

Describe the solution you'd like Support docker secrets. Either by adding new environment variables such as DB_PASS_FILE which actually does a cat /run/secrets/DB_PASS_FILE inside the container - or we could have some logic that checks whether /run/secrets/DB_PASS exists and overwrites whatever is in environment variable DB_PASS.

Describe alternatives you've considered (optional) Have my secrets in the .env file

贡献者指南

技术栈: dockerphp
领域: backenddevopssecurity
议题类型: feature
难度: 2
预计时间: 1-3 hours
活动状态: stale
清晰度: clear
前置要求: Docker basicsDocker secrets conceptPHP environment variables
新手友好度: 70
研究方向: Investigate the current Docker Compose setup and entrypoint scripts (likely in 'docker/' directory or entrypoint.sh). Determine how environment variables are loaded (probably via a PHP script that parses .env). Implement support for Docker secrets by either adding FILE suffixed variables or checking /run/secrets/ directory. Ensure backwards compatibility and document the change. Consult the Docker documentation for secrets and the MonicaHQ Docker deployment guide.