From 90807aae2f00a40e337aff5a9b42df6d7034863a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Sun, 9 Aug 2026 07:46:46 +0400
Subject: [PATCH] =?UTF-8?q?prod:=20=D0=BA=D1=80=D0=B5=D0=B4=D1=8B=20=D1=83?=
 =?UTF-8?q?=D0=B1=D1=80=D0=B0=D0=BD=D1=8B=20=D0=B8=D0=B7=20Dockerfile=20?=
 =?UTF-8?q?=E2=86=92=20=D0=B2=20jsonEnv=20=D0=BF=D1=80=D0=B8=20=D1=81?=
 =?UTF-8?q?=D0=BE=D0=B7=D0=B4=D0=B0=D0=BD=D0=B8=D0=B8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Dockerfile | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 61e847c..7c33182 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -15,15 +15,13 @@ FROM alpine:3.21
 RUN apk --no-cache add ca-certificates
 COPY --from=builder /app/registry /registry
 
-# ── Prod config (change here → rebuild → push → redeploy) ─────────────────
+# ── Non-secret config (change here → rebuild → push → redeploy) ─────────
 ENV S3_ENDPOINT=s3.msk-1.ngcloud.ru \
     S3_BUCKET=terraform-registry \
     S3_PREFIX=tf-registry.services.ngcloud.ru \
     REGISTRY_HOSTNAME=tf-registry.services.ngcloud.ru \
-    PORT=5000 \
-    S3_ACCESS_KEY=6DDP5PKQEE37WLSWXP07 \
-    S3_SECRET_KEY=W0vV4YNeHIqMa2sRCXsR61ZuQfAJIZzVj2VgnBrT
-# ── Reader-креды (1112_terraform:reader), убрать когда jsonEnv в modify ───
+    PORT=5000
+# ── Secrets in UI jsonEnv: S3_ACCESS_KEY, S3_SECRET_KEY ───────────────────
 
 EXPOSE 5000
 CMD ["/registry"]