secrets processibg chanbged

.github/workflows/release-docker.yml

@@ -233,12 +233,29 @@ jobs:
       - name: Create release-only docker bundle 
         run: | 
              mkdir -p release-bundle 
+
+             # 1. .env Datei aus Gitea Secrets erzeugen
+             cat > release-bundle/.env <<EOF
+             INVENTAR_SECRET_KEY=${{ secrets.INVENTAR_SECRET_KEY }}
+             INVENTAR_DATA_ENCRYPTION_KEY=${{ secrets.INVENTAR_DATA_ENCRYPTION_KEY }}
+             INVENTAR_MONGODB_PASSWORD=${{ secrets.INVENTAR_MONGODB_PASSWORD }}
+             EMAIL_ENABLED=${{ secrets.EMAIL_ENABLED }}
+             EMAIL_SMTP_HOST=${{ secrets.EMAIL_SMTP_HOST }}
+             EMAIL_SMTP_PORT=${{ secrets.EMAIL_SMTP_PORT }}
+             EMAIL_USERNAME=${{ secrets.EMAIL_USERNAME }}
+             EMAIL_PASSWORD=${{ secrets.EMAIL_PASSWORD }}
+             EMAIL_FROM_ADDRESS=${{ secrets.EMAIL_FROM_ADDRESS }}
+             EOF
+
+             # 2. docker-compose.yml nutzt env_file
              cat > release-bundle/docker-compose.yml <<EOF 
              services: 
                app: 
                  image: \${INVENTAR_APP_IMAGE:-${{ steps.meta.outputs.image }}} 
                  container_name: inventarsystem-app 
                  restart: unless-stopped 
+                 env_file:
+                   - .env
                  ports: 
                    - "\${INVENTAR_HTTP_PORT:-10000}:8000" 
                  depends_on: 
@@ -250,15 +267,6 @@ jobs:
                    INVENTAR_MONGODB_DB: Inventarsystem 
                    INVENTAR_BACKUP_FOLDER: /data/backups 
                    INVENTAR_LOGS_FOLDER: /data/logs 
-                  INVENTAR_SECRET_KEY: ${{ secrets.INVENTAR_SECRET_KEY }}
-                  INVENTAR_DATA_ENCRYPTION_KEY: ${{ secrets.INVENTAR_DATA_ENCRYPTION_KEY }}
-                  INVENTAR_MONGODB_PASSWORD: ${{ secrets.INVENTAR_MONGODB_PASSWORD }}
-                  EMAIL_ENABLED: ${{ secrets.EMAIL_ENABLED }}
-                  EMAIL_SMTP_HOST: mai.invario-software.de
-                  EMAIL_SMTP_PORT: 587
-                  EMAIL_USERNAME: no-reply@invario-software.de
-                  EMAIL_PASSWORD: ${{ secrets.EMAIL_PASSWORD }}
-                  EMAIL_FROM_ADDRESS: ${{ secrets.EMAIL_FROM_ADDRESS }}
                  expose: 
                    - "8000" 
                  volumes: