revert secrets processibg chanbged
This commit is contained in:
2026-09-16 15:35:55 +00:00
parent 612ce2e6e6
commit 6589b8d275
+9 -17
View File
@@ -233,29 +233,12 @@ jobs:
- name: Create release-only docker bundle - name: Create release-only docker bundle
run: | run: |
mkdir -p release-bundle mkdir -p release-bundle
# 1. .env Datei aus Gitea Secrets erzeugen
cat > release-bundle/.env <<EOF
INVENTAR_SECRET_KEY=${{ secrets.INVENTAR_SECRET_KEY }}
INVENTAR_DATA_ENCRYPTION_KEY=${{ secrets.INVENTAR_DATA_ENCRYPTION_KEY }}
INVENTAR_MONGODB_PASSWORD=${{ secrets.INVENTAR_MONGODB_PASSWORD }}
EMAIL_ENABLED=${{ secrets.EMAIL_ENABLED }}
EMAIL_SMTP_HOST=${{ secrets.EMAIL_SMTP_HOST }}
EMAIL_SMTP_PORT=${{ secrets.EMAIL_SMTP_PORT }}
EMAIL_USERNAME=${{ secrets.EMAIL_USERNAME }}
EMAIL_PASSWORD=${{ secrets.EMAIL_PASSWORD }}
EMAIL_FROM_ADDRESS=${{ secrets.EMAIL_FROM_ADDRESS }}
EOF
# 2. docker-compose.yml nutzt env_file
cat > release-bundle/docker-compose.yml <<EOF cat > release-bundle/docker-compose.yml <<EOF
services: services:
app: app:
image: \${INVENTAR_APP_IMAGE:-${{ steps.meta.outputs.image }}} image: \${INVENTAR_APP_IMAGE:-${{ steps.meta.outputs.image }}}
container_name: inventarsystem-app container_name: inventarsystem-app
restart: unless-stopped restart: unless-stopped
env_file:
- .env
ports: ports:
- "\${INVENTAR_HTTP_PORT:-10000}:8000" - "\${INVENTAR_HTTP_PORT:-10000}:8000"
depends_on: depends_on:
@@ -267,6 +250,15 @@ jobs:
INVENTAR_MONGODB_DB: Inventarsystem INVENTAR_MONGODB_DB: Inventarsystem
INVENTAR_BACKUP_FOLDER: /data/backups INVENTAR_BACKUP_FOLDER: /data/backups
INVENTAR_LOGS_FOLDER: /data/logs INVENTAR_LOGS_FOLDER: /data/logs
INVENTAR_SECRET_KEY: ${{ secrets.INVENTAR_SECRET_KEY }}
INVENTAR_DATA_ENCRYPTION_KEY: ${{ secrets.INVENTAR_DATA_ENCRYPTION_KEY }}
INVENTAR_MONGODB_PASSWORD: ${{ secrets.INVENTAR_MONGODB_PASSWORD }}
EMAIL_ENABLED: ${{ secrets.EMAIL_ENABLED }}
EMAIL_SMTP_HOST: mai.invario-software.de
EMAIL_SMTP_PORT: 587
EMAIL_USERNAME: no-reply@invario-software.de
EMAIL_PASSWORD: ${{ secrets.EMAIL_PASSWORD }}
EMAIL_FROM_ADDRESS: ${{ secrets.EMAIL_FROM_ADDRESS }}
expose: expose:
- "8000" - "8000"
volumes: volumes: