Skip to content

[docker] Cleanup environment files

Evilham requested to merge docker-env-rework into main
By having the environment explicit on each service, we both document
the settings and have more control over what each service is allowed
to see.

This avoids weird things like nginx having access to postgresql's
credentials on its environment.

As a bonus: we are able to use one single environment file, which is
basically dd.conf with some values that are dynamically-calculated and
added from dd-ctl.

[NC] Reduce upstream diff and improve env vars

[dd.conf] Cleanup some variables

While at it, also ensure that API_SECRET gets rotated when running
./dd-ctl securize

Merge request reports