apache / apache/hertzbeat

[Feature] Maybe the password in docker-compose.yaml can be random rather than 123456?

Open
#4,218 3 comments 0 reactions 0 assignees View on GitHub
new feature
Dominant language
Java
Stars
7.4k
Forks
1.3k
Avg merge
1d 20h
Merged PRs (30d)
32

Description

### Feature Request

Hi, I had installed hertzbeat with docker compose, ref to :https://hertzbeat.apache.org/zh-cn/docs/start/docker-compose-deploy

But I found that the PostgreSQL username and password used by Hertzbeat are root/123456. That doesn't seem like a good idea in a production environment. After installed hertzbeat, I used db tools to connect my server with root/123456, and everything in hertzbeat shows.

Maybe something can be done? A random password, or using .env, or anything else.

Thanks

### Is your feature request related to a problem? Please describe

_No response_

### Describe the solution you'd like

_No response_

### Describe alternatives you've considered

_No response_

### Additional context

_No response_

Contributor guide

Open the contributing guide

Research direction

Start with docker-compose.yaml and the Docker Compose deployment documentation linked in the issue. Trace how the PostgreSQL username and password are configured, then determine the supported secure configuration approach, such as generated credentials or .env values. Done means a fresh deployment no longer exposes the default password and HertzBeat can still connect to PostgreSQL.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker-compose, postgresql
Domain
databases, devops, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.