You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm in the process of replacing all sensitive data in my .env-files using docker secrets. Using docker secrets does not seem to work with your container unfortunately.
My current docker-compose.yaml:
services:
opengist:
image: ghcr.io/thomiceli/opengist:1
container_name: opengist
restart: unless-stopped
ports:
- 127.0.0.1:6157:6157 # HTTP port
- 10.10.120.5:2222:2222 #SSH port, can be removed if you don't use SSH
volumes:
- /path/to/gist:/opengist
environment:
- UID=1500
- GID=120
# I tried the following variants (only using one variant per attempt... ;))
- OG_OIDC_CLIENT_KEY=${OG_OIDC_CLIENT_KEY} <--- works - if OG_OIDC_CLIENT_KEY is defined in .env
- OG_OIDC_CLIENT_KEY_FILE=/run/secrest/gist_oidc-client <--- does not work
- OG_OIDC_CLIENT_KEY=file:///run/secrets/gist_oidc-client <--- does not work
- OG_OIDC_SECRET=${OG_OIDC_SECRET} <--- works - if OG_OIDC_SECRET is defined in .env
- OG_OIDC_SECRET_FILE=/run/secrest/gist_oidc-secret <--- does not work
- OG_OIDC_SECRET=file:///run/secrets/gist_oidc-secret <--- does not work
- OG_OIDC_DISCOVERY_URL=${OG_OIDC_DISCOVERY_URL}
secrets:
- gist_oidc-client
- gist_oidc-secret
networks:
- proxy_frontend
networks:
proxy_frontend:
external: true
secrets:
gist_oidc-client:
file: /path/to/secrets/gist/gist_oidc-client
gist_oidc-secret:
file: /path/to/secrets/gist/gist_oidc-secret`
I want to replace the OG_OIDC_CLIENT_KEY and OG_OIDC_SECRET with secrets. I have defined the secrets, attached them to the container - however using OG_OIDC_CLIENT_KEY_FILE/OG_OIDC_SECRET_FILE instead of the above environmental variables does not work - neither does defining the existing variables as "file:///run/secrets/gist_oidc-client".
Could you add a feature to read the OIDC-Client-Key/Secret from a file?
The text was updated successfully, but these errors were encountered:
I'm in the process of replacing all sensitive data in my .env-files using docker secrets. Using docker secrets does not seem to work with your container unfortunately.
My current docker-compose.yaml:
The text was updated successfully, but these errors were encountered: