Adding support for docker secrets (#93)

monicahq · Jan 12, 2022 · d6d6c22 · d6d6c22
1 parent 306c39d
commit d6d6c22
Show file tree

Hide file tree

Showing 4 changed files with 88 additions and 0 deletions.
diff --git a/apache/entrypoint.sh b/apache/entrypoint.sh
@@ -2,6 +2,28 @@
 
 set -Eeo pipefail
 
+# set environment variables with docker secrets in /run/secrets/*
+supportedSecrets=( "DB_PASSWORD" 
+                   "APP_KEY" 
+                   "HASH_SALT" 
+                   "MAIL_PASSWORD" 
+                   "REDIS_PASSWORD" 
+                   "AWS_KEY" 
+                   "AWS_SECRET" 
+                   "PASSPORT_PASSWORD_GRANT_CLIENT_ID" 
+                   "PASSPORT_PASSWORD_GRANT_CLIENT_SECRET" 
+                   "LOCATION_IQ_API_KEY"
+                  )
+for secret in ${supportedSecrets[@]}; do
+    envFile="${secret}_FILE"
+    if [ $(printenv ${envFile}) ]; then envFileName=`printenv ${envFile}`; fi
+    if [[ ${!envFile} && -f "$envFileName" ]]; then
+        val=`cat $envFileName`
+        export "${secret}"="$val"
+        echo "${secret} environment variable was set by secret ${envFile}"
+    fi
+done
+
 # wait for the database to start
 waitfordb() {
     TERM=dumb php -- <<'EOPHP'

diff --git a/docker-entrypoint.sh b/docker-entrypoint.sh
@@ -2,6 +2,28 @@
 
 set -Eeo pipefail
 
+# set environment variables with docker secrets in /run/secrets/*
+supportedSecrets=( "DB_PASSWORD" 
+                   "APP_KEY" 
+                   "HASH_SALT" 
+                   "MAIL_PASSWORD" 
+                   "REDIS_PASSWORD" 
+                   "AWS_KEY" 
+                   "AWS_SECRET" 
+                   "PASSPORT_PASSWORD_GRANT_CLIENT_ID" 
+                   "PASSPORT_PASSWORD_GRANT_CLIENT_SECRET" 
+                   "LOCATION_IQ_API_KEY"
+                  )
+for secret in ${supportedSecrets[@]}; do
+    envFile="${secret}_FILE"
+    if [ $(printenv ${envFile}) ]; then envFileName=`printenv ${envFile}`; fi
+    if [[ ${!envFile} && -f "$envFileName" ]]; then
+        val=`cat $envFileName`
+        export "${secret}"="$val"
+        echo "${secret} environment variable was set by secret ${envFile}"
+    fi
+done
+
 # wait for the database to start
 waitfordb() {
     TERM=dumb php -- <<'EOPHP'

diff --git a/fpm-alpine/entrypoint.sh b/fpm-alpine/entrypoint.sh
@@ -2,6 +2,28 @@
 
 set -Eeo pipefail
 
+# set environment variables with docker secrets in /run/secrets/*
+supportedSecrets=( "DB_PASSWORD" 
+                   "APP_KEY" 
+                   "HASH_SALT" 
+                   "MAIL_PASSWORD" 
+                   "REDIS_PASSWORD" 
+                   "AWS_KEY" 
+                   "AWS_SECRET" 
+                   "PASSPORT_PASSWORD_GRANT_CLIENT_ID" 
+                   "PASSPORT_PASSWORD_GRANT_CLIENT_SECRET" 
+                   "LOCATION_IQ_API_KEY"
+                  )
+for secret in ${supportedSecrets[@]}; do
+    envFile="${secret}_FILE"
+    if [ $(printenv ${envFile}) ]; then envFileName=`printenv ${envFile}`; fi
+    if [[ ${!envFile} && -f "$envFileName" ]]; then
+        val=`cat $envFileName`
+        export "${secret}"="$val"
+        echo "${secret} environment variable was set by secret ${envFile}"
+    fi
+done
+
 # wait for the database to start
 waitfordb() {
     TERM=dumb php -- <<'EOPHP'

diff --git a/fpm/entrypoint.sh b/fpm/entrypoint.sh
@@ -2,6 +2,28 @@
 
 set -Eeo pipefail
 
+# set environment variables with docker secrets in /run/secrets/*
+supportedSecrets=( "DB_PASSWORD" 
+                   "APP_KEY" 
+                   "HASH_SALT" 
+                   "MAIL_PASSWORD" 
+                   "REDIS_PASSWORD" 
+                   "AWS_KEY" 
+                   "AWS_SECRET" 
+                   "PASSPORT_PASSWORD_GRANT_CLIENT_ID" 
+                   "PASSPORT_PASSWORD_GRANT_CLIENT_SECRET" 
+                   "LOCATION_IQ_API_KEY"
+                  )
+for secret in ${supportedSecrets[@]}; do
+    envFile="${secret}_FILE"
+    if [ $(printenv ${envFile}) ]; then envFileName=`printenv ${envFile}`; fi
+    if [[ ${!envFile} && -f "$envFileName" ]]; then
+        val=`cat $envFileName`
+        export "${secret}"="$val"
+        echo "${secret} environment variable was set by secret ${envFile}"
+    fi
+done
+
 # wait for the database to start
 waitfordb() {
     TERM=dumb php -- <<'EOPHP'