terraform/tf_registry
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

prod: креды убраны из Dockerfile → в jsonEnv при создании

Browse Source
This commit is contained in:
“Naeel”
2026-08-09 07:46:46 +04:00
parent 4592a35b3e
commit 90807aae2f
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+3 -5
View File
@@ -15,15 +15,13 @@ FROM alpine:3.21
RUN apk --no-cache add ca-certificates RUN apk --no-cache add ca-certificates
COPY --from=builder /app/registry /registry COPY --from=builder /app/registry /registry
# ── Prod config (change here → rebuild → push → redeploy) ───────────────── # ── Non-secret config (change here → rebuild → push → redeploy) ─────────
ENV S3_ENDPOINT=s3.msk-1.ngcloud.ru \ ENV S3_ENDPOINT=s3.msk-1.ngcloud.ru \
S3_BUCKET=terraform-registry \ S3_BUCKET=terraform-registry \
S3_PREFIX=tf-registry.services.ngcloud.ru \ S3_PREFIX=tf-registry.services.ngcloud.ru \
REGISTRY_HOSTNAME=tf-registry.services.ngcloud.ru \ REGISTRY_HOSTNAME=tf-registry.services.ngcloud.ru \
PORT=5000 \ PORT=5000
S3_ACCESS_KEY=6DDP5PKQEE37WLSWXP07 \ # ── Secrets in UI jsonEnv: S3_ACCESS_KEY, S3_SECRET_KEY ───────────────────
S3_SECRET_KEY=W0vV4YNeHIqMa2sRCXsR61ZuQfAJIZzVj2VgnBrT
# ── Reader-креды (1112_terraform:reader), убрать когда jsonEnv в modify ───
EXPOSE 5000 EXPOSE 5000
CMD ["/registry"] CMD ["/registry"]