Changes of the settings.py and in generell the Variable Proccessing to have a more secure deployment Process

2026-07-28 20:52:05 +02:00
parent ea402f3223
commit 315918098d
3 changed files with 41 additions and 32 deletions
@@ -200,26 +200,35 @@ jobs:

      - name: Create release-only docker bundle
        run: |
-          mkdir -p release-bundle
-          cat > release-bundle/docker-compose.yml <<EOF
-          services:
-            app:
-              image: \${INVENTAR_APP_IMAGE:-${{ steps.meta.outputs.image }}}
-              container_name: inventarsystem-app
-              restart: unless-stopped
-              ports:
-                - "\${INVENTAR_HTTP_PORT:-10000}:8000"
-              depends_on:
-                - mongodb
-                - redis
-              environment:
-                INVENTAR_MONGODB_HOST: mongodb
-                INVENTAR_MONGODB_PORT: "27017"
-                INVENTAR_MONGODB_DB: Inventarsystem
-                INVENTAR_BACKUP_FOLDER: /data/backups
-                INVENTAR_LOGS_FOLDER: /data/logs
-              expose:
-                - "8000"
+            mkdir -p release-bundle
+            cat > release-bundle/docker-compose.yml <<EOF
+            services:
+              app:
+                image: \${INVENTAR_APP_IMAGE:-${{ steps.meta.outputs.image }}}
+                container_name: inventarsystem-app
+                restart: unless-stopped
+                ports:
+                  - "\${INVENTAR_HTTP_PORT:-10000}:8000"
+                depends_on:
+                  - mongodb
+                  - redis
+                environment:
+                  INVENTAR_MONGODB_HOST: mongodb
+                  INVENTAR_MONGODB_PORT: "27017"
+                  INVENTAR_MONGODB_DB: Inventarsystem
+                  INVENTAR_BACKUP_FOLDER: /data/backups
+                  INVENTAR_LOGS_FOLDER: /data/logs
+                  INVENTAR_SECRET_KEY: \${INVENTAR_SECRET_KEY}
+                  INVENTAR_DATA_ENCRYPTION_KEY: \${INVENTAR_DATA_ENCRYPTION_KEY}
+                  INVENTAR_MONGODB_PASSWORD: \${INVENTAR_MONGODB_PASSWORD}
+                  INVENTAR_SECRET_KEY: \${INVENTAR_SECRET_KEY}
+                  EMAIL_ENABLED: \${EMAIL_ENABLED}
+                  EMAIL_SMTP_HOST: \${EMAIL_SMTP_HOST}
+                  EMAIL_SMTP_PORT: \${EMAIL_SMTP_PORT}
+                  EMAIL_USERNAME: \${EMAIL_USERNAME}
+                  EMAIL_PASSWORD: \${EMAIL_PASSWORD}
+                expose:
+                  - "8000"
              volumes:
                - ./config.json:/app/config.json:ro
                - app_uploads:/app/Web/uploads