abandon to use secret, it has too many consequences
+ use classical env technic, but it might not be safe
This commit is contained in:
16
srcs/.env
16
srcs/.env
@@ -1,8 +1,8 @@
|
||||
# DOMAIN_NAME=wil.42.fr
|
||||
# # certificates
|
||||
# CERTS_=./XXXXXXXXXXXX
|
||||
# # MYSQL SETUP
|
||||
# MYSQL_ROOT_PASSWORD=XXXXXXXXXXXX
|
||||
# MYSQL_USER=XXXXXXXXXXXX
|
||||
# MYSQL_PASSWORD=XXXXXXXXXXXX
|
||||
# [...]
|
||||
#DOMAIN_NAME=wil.42.fr
|
||||
## certificates
|
||||
#CERTS_=./XXXXXXXXXXXX
|
||||
|
||||
## MARIADB SETUP
|
||||
DB_NAME=db_wp_inception
|
||||
DB_USER=user_wp_inception
|
||||
DB_PSWD="if you read this i will have to erase your memory"
|
||||
|
||||
@@ -9,12 +9,12 @@ version: "3.8"
|
||||
|
||||
services:
|
||||
# ---------------------------------
|
||||
test:
|
||||
build:
|
||||
context: ./requirements/test
|
||||
dockerfile: Dockerfile
|
||||
image: test
|
||||
container_name: mytest
|
||||
# test:
|
||||
# build:
|
||||
# context: ./requirements/test
|
||||
# dockerfile: Dockerfile
|
||||
# image: test
|
||||
# container_name: mytest
|
||||
# ---------------------------------
|
||||
nginx:
|
||||
#restart: on-failure
|
||||
@@ -29,16 +29,13 @@ services:
|
||||
# ---------------------------------
|
||||
mariadb:
|
||||
#restart: on-failure
|
||||
env_file: .env
|
||||
build:
|
||||
context: ./requirements/mariadb
|
||||
dockerfile: Dockerfile
|
||||
args:
|
||||
- DB_NAME=${DB_NAME}
|
||||
- DB_USER=${DB_USER}
|
||||
- DB_PSWD=${DB_PSWD}
|
||||
image: mariadb
|
||||
container_name: mymariadb
|
||||
#--secret id=mysecret,src=mysecret.txt
|
||||
secrets:
|
||||
- my_secret
|
||||
|
||||
secrets:
|
||||
my_secret:
|
||||
file: ./secret.txt
|
||||
|
||||
|
||||
@@ -1,20 +1,17 @@
|
||||
FROM debian:buster
|
||||
|
||||
ARG DEBIAN_FRONTEND=noninteractive
|
||||
|
||||
# docker build --secret tag : https://docs.docker.com/develop/develop-images/build_enhancements/#new-docker-build-secret-information)
|
||||
# use secret with docker : https://www.rockyourcode.com/using-docker-secrets-with-docker-compose/)
|
||||
RUN --mount=type=secret,id=my_secret cat /run/secrets/my_secret.txt
|
||||
#RUN cat /run/secrets/my_secret.txt
|
||||
ARG DB_NAME
|
||||
ARG DB_USER
|
||||
ARG DB_PSWD
|
||||
|
||||
RUN apt update && \
|
||||
apt install -y mariadb-client mariadb-server && \
|
||||
rm -rf /var/lib/apt/lists/* && \
|
||||
\
|
||||
service mysql start && \
|
||||
mariadb --execute="CREATE DATABASE db_hugo_test;" && \
|
||||
mariadb --execute="CREATE USER 'u_hugo_test'@'localhost' IDENTIFIED BY 'hello';" && \
|
||||
mariadb --execute="GRANT ALL PRIVILEGES ON *.* TO 'u_hugo_test'@'localhost' with grant option;"
|
||||
mariadb --execute="CREATE DATABASE ${DB_NAME};" && \
|
||||
mariadb --execute="CREATE USER '${DB_USER}'@'localhost' IDENTIFIED BY '${DB_PSWD}';" && \
|
||||
mariadb --execute="GRANT ALL PRIVILEGES ON *.* TO '${DB_USER}'@'localhost' with grant option;"
|
||||
|
||||
CMD [ "mysqld" ]
|
||||
|
||||
|
||||
1
srcs/requirements/mariadb/secret.txt
Normal file
1
srcs/requirements/mariadb/secret.txt
Normal file
@@ -0,0 +1 @@
|
||||
mon_super_mot_de_passe
|
||||
Reference in New Issue
Block a user