gsadmin/temetro
1
0
Fork 0
mirror of https://github.com/temetro/temetro.git synced 2026-08-24 17:46:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

backend: zero-setup Docker — auto-generate & persist secrets

Browse Source 
`docker compose up` now works with no .env editing. A new entrypoint
(docker-entrypoint.sh) generates any missing secret (BETTER_AUTH_SECRET,
AI_CREDENTIALS_KEY) on first start and persists it to the temetro_secrets
volume, so values stay stable across restarts (rotating them would log users
out / invalidate stored AI keys). Real values passed via .env/compose still win.

This also fixes the boot failure where the compose backend ran with
NODE_ENV=production but never passed AI_CREDENTIALS_KEY through, tripping the
production guard. The secret is now an optional pass-through and BETTER_AUTH_SECRET
no longer hard-fails when unset.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Khalid Abdi
2026-06-13 19:15:11 +03:00
parent a3f4cf8633
commit a80086ef72
4 changed files with 67 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/Dockerfile
+5 -1
View File
@@ -18,6 +18,10 @@ COPY package*.json ./
RUN npm ci --omit=dev
COPY --from=build /app/dist ./dist
COPY --from=build /app/drizzle ./drizzle
COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
RUN chmod +x /usr/local/bin/docker-entrypoint.sh
EXPOSE 4000
# Apply migrations, then start the API.
# The entrypoint auto-generates any missing secrets, then we apply migrations
# and start the API.
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
CMD ["sh", "-c", "node dist/migrate.js && node dist/index.js"]