Use secrets for password management

kahgoh · Jun 26, 2024 · 5fc8c4d · 5fc8c4d
1 parent 72f5ea9
commit 5fc8c4d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sql/01-users.sh b/sql/01-users.sh
@@ -2,7 +2,7 @@
 set -e
 
 psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
-	CREATE USER lotto WITH ENCRYPTED PASSWORD '${LOTTO_USER_PWD}';
+	CREATE USER lotto WITH ENCRYPTED PASSWORD '$(< /run/secrets/${LOTTO_USER_PWD_SECRET} )';
 	GRANT ALL PRIVILEGES ON DATABASE lotto TO lotto;
     GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO lotto;
     GRANT USAGE ON SCHEMA public TO lotto;