fix(deploy): isolate application from hosting owner credentials

2026-10-09 23:51:06 +02:00
parent 4c99662f6e
commit add96fb40b
5 changed files with 32 additions and 1 deletions
@@ -5,6 +5,7 @@ if [ -n "${APP_DATABASE_PASSWORD_FILE:-}" ]; then
  DATABASE_URL="$(node scripts/runtime-database-url.mjs)"
  export DATABASE_URL
 fi
+unset POSTGRES_PASSWORD PGADMIN_DEFAULT_PASSWORD APP_DATABASE_PASSWORD MIGRATION_DATABASE_URL
 # Schema changes are applied by the maintenance image before runtime startup.
 if [ -n "${NOTDIENST_JOB_SECRET:-}" ]; then
  node scripts/notdienst-alarm-worker.mjs &