Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Shared database security #324

Open
jcalfee opened this issue Sep 3, 2024 · 0 comments
Open

Shared database security #324

jcalfee opened this issue Sep 3, 2024 · 0 comments

Comments

@jcalfee
Copy link

jcalfee commented Sep 3, 2024

Do you have a way to keep the database password hidden from the linked app? For security, I would like all linked apps to use their own login. I gather that I can config:set each app with its own DATABASE_URL, however, I noticed there are other variables as well that contain the password. I assume that I can't simply change the password outside of dokku without breaking something (backups for example).

DOKKU_POSTGRES_AQUA_URL
DOKKU_POSTGRES_BLACK_URL
DOKKU_POSTGRES_BLUE_URL

And in the future? If there is a simple future-proof way to keep the credential separate from the app in the container then the end-user can handle any setup requirements that comes along by falling back to config:set and without risking any exposure to the main postgres login.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant