Update installation script to use docker secrets for DATABASE_URL
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 37.4k
- Forks
- 3k
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 73
Description
What problem will this feature address?
Currently DB connection string is not secured.
Describe the solution you'd like
Since Dokploy is deployed to swarm to improve it's security and allow users to customize their db passoword - I suggest to create docker secret during installation and set DATABASE_URL_FILE pointing to this secret and then resolve it in runtime if provided.
Describe alternatives you've considered
Passing DATABASE_URL as environment variable, using default DATABASE_URL, mounting .env file from docker secret. All options are not secure because env variable is easy to access using shell.
Additional context
No response
Will you send a PR to implement it?
Maybe, need help
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the installation script and the runtime handling for DATABASE_URL, then inspect how the Docker Swarm deployment is configured. Done means installation creates a Docker secret, points DATABASE_URL_FILE to it, and runtime resolves that value when provided; verify the existing installation and deployment checks if available.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, typescript
- Domain
- devops, infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100