fix(deploy): preserve credential blocking through hosting parser

2026-10-09 23:55:16 +02:00
parent add96fb40b
commit b915857951
3 changed files with 9 additions and 9 deletions
@@ -27,12 +27,12 @@ services:
      NODE_ENV: production
      PORT: 3000
      HOSTNAME: 0.0.0.0
-      # Override host-wide env_file injection: administrative credentials belong to migrate only.
-      DATABASE_URL: ""
-      MIGRATION_DATABASE_URL: ""
-      APP_DATABASE_PASSWORD: ""
-      POSTGRES_PASSWORD: ""
-      PGADMIN_DEFAULT_PASSWORD: ""
+      # A nonempty sentinel survives hosting Compose parsers and blocks global env_file credentials.
+      DATABASE_URL: "unavailable-in-app"
+      MIGRATION_DATABASE_URL: "unavailable-in-app"
+      APP_DATABASE_PASSWORD: "unavailable-in-app"
+      POSTGRES_PASSWORD: "unavailable-in-app"
+      PGADMIN_DEFAULT_PASSWORD: "unavailable-in-app"
      APP_DATABASE_PASSWORD_FILE: /app/runtime-secrets/database-password
      APP_DATABASE_NAME: ${POSTGRES_DB:-kita_planer}
      AUTH_SECRET: ${AUTH_SECRET:?}