fix(deploy): isolate application from hosting owner credentials

2026-10-09 23:51:06 +02:00
parent 4c99662f6e
commit add96fb40b
5 changed files with 32 additions and 1 deletions
@@ -27,6 +27,12 @@ services:
      NODE_ENV: production
      PORT: 3000
      HOSTNAME: 0.0.0.0
+      # Override host-wide env_file injection: administrative credentials belong to migrate only.
+      DATABASE_URL: ""
+      MIGRATION_DATABASE_URL: ""
+      APP_DATABASE_PASSWORD: ""
+      POSTGRES_PASSWORD: ""
+      PGADMIN_DEFAULT_PASSWORD: ""
      APP_DATABASE_PASSWORD_FILE: /app/runtime-secrets/database-password
      APP_DATABASE_NAME: ${POSTGRES_DB:-kita_planer}
      AUTH_SECRET: ${AUTH_SECRET:?}