maj

DragonBank/docker-compose.yml

@@ -7,7 +7,9 @@ services:
     environment:
       POSTGRES_DB: dragonbank
       POSTGRES_USER: dragonadmin
-      POSTGRES_PASSWORD: dragonpass
+      POSTGRES_PASSWORD_FILE: /run/secrets/db_password
+    secrets:
+      - db_password
     volumes:
       - postgres_data:/var/lib/postgresql/data
       - ./db/init.sql:/docker-entrypoint-initdb.d/init.sql
@@ -29,9 +31,11 @@ services:
       dockerfile: Dockerfile
     container_name: dragonbank-backend
     environment:
-      DATABASE_URL: postgresql://dragonadmin:dragonpass@db:5432/dragonbank
+      POSTGRES_PASSWORD_FILE: /run/secrets/db_password
       SECRET_KEY: dragonbank-super-secret-key-2024
       FLASK_ENV: production
+    secrets:
+      - db_password
     depends_on:
       db:
         condition: service_healthy
@@ -77,17 +81,19 @@ services:
       dockerfile: Dockerfile
     container_name: dragonbank-interests
     environment:
-      DATABASE_URL: postgresql://dragonadmin:dragonpass@db:5432/dragonbank
+      POSTGRES_PASSWORD_FILE: /run/secrets/db_password
       INTEREST_RATE_LIVRET_A: 0.03
       INTEREST_RATE_ASSURANCE_VIE: 0.02
-      INTERVAL_SECONDS: 86400
+      INTERVAL_SECONDS: 60
+    secrets:
+      - db_password
     depends_on:
       db:
         condition: service_healthy
     networks:
       - dragonbank-backend-net
     healthcheck:
-      test: ["CMD", "python", "-c", "import psycopg2; psycopg2.connect('postgresql://dragonadmin:dragonpass@db:5432/dragonbank')"]
+      test: ["CMD", "python", "-c", "import psycopg2, os; p = open('/run/secrets/db_password').read().strip() if os.path.exists('/run/secrets/db_password') else 'dragonpass'; psycopg2.connect(f'postgresql://dragonadmin:{p}@db:5432/dragonbank')"]
       interval: 30s
       timeout: 10s
       retries: 3
@@ -102,4 +108,8 @@ networks:
   dragonbank-backend-net:
     driver: bridge
   dragonbank-frontend-net:
-    driver: bridge
+    driver: bridge
+
+secrets:
+  db_password:
+    file: ./secrets/db_password.txt