orztv
commited on
Commit
·
f518598
1
Parent(s):
9e9304b
update
Browse files- Dockerfile +8 -4
Dockerfile
CHANGED
@@ -27,6 +27,10 @@ RUN adduser -D -u 1000 nocodb && \
|
|
27 |
chown -R nocodb:nocodb /etc/redis.conf /var/log/redis /var/run/redis /usr/app/data /var/lib/redis && \
|
28 |
apk add --update --no-cache dasel dumb-init nodejs
|
29 |
|
|
|
|
|
|
|
|
|
30 |
# 复制启动脚本和 Node.js 示例程序并设置权限
|
31 |
COPY docker/startup.sh /usr/src/appEntry/startup.sh
|
32 |
RUN chmod +x /usr/src/appEntry/startup.sh
|
@@ -46,16 +50,16 @@ ENV LITESTREAM_S3_SKIP_VERIFY=false \
|
|
46 |
NODE_ENV=production \
|
47 |
NC_ALLOW_LOCAL_HOOKS=true \
|
48 |
NC_REDIS_URL="redis://:redis_password@localhost:6379/4" \
|
49 |
-
S3_BUCKET_NAME=$
|
50 |
S3_REGION=${NC_S3_REGION} \
|
51 |
S3_ENDPOINT=${NC_S3_ENDPOINT} \
|
52 |
S3_ACCESS_KEY=${NC_S3_ACCESS_KEY} \
|
53 |
-
S3_ACCESS_SECRET=$
|
54 |
-
LITESTREAM_S3_BUCKET=$
|
55 |
LITESTREAM_S3_REGION=${NC_S3_REGION} \
|
56 |
LITESTREAM_S3_ENDPOINT=${NC_S3_ENDPOINT} \
|
57 |
LITESTREAM_S3_ACCESS_KEY_ID=${NC_S3_ACCESS_KEY} \
|
58 |
-
LITESTREAM_S3_SECRET_ACCESS_KEY=$
|
59 |
|
60 |
EXPOSE 8080
|
61 |
|
|
|
27 |
chown -R nocodb:nocodb /etc/redis.conf /var/log/redis /var/run/redis /usr/app/data /var/lib/redis && \
|
28 |
apk add --update --no-cache dasel dumb-init nodejs
|
29 |
|
30 |
+
RUN --mount=type=secret,id=NC_S3_ACCESS_SECRET,mode=0444,required=true \
|
31 |
+
--mount=type=secret,id=NC_S3_BUCKET_NAME,mode=0444,required=true
|
32 |
+
|
33 |
+
|
34 |
# 复制启动脚本和 Node.js 示例程序并设置权限
|
35 |
COPY docker/startup.sh /usr/src/appEntry/startup.sh
|
36 |
RUN chmod +x /usr/src/appEntry/startup.sh
|
|
|
50 |
NODE_ENV=production \
|
51 |
NC_ALLOW_LOCAL_HOOKS=true \
|
52 |
NC_REDIS_URL="redis://:redis_password@localhost:6379/4" \
|
53 |
+
S3_BUCKET_NAME=$(cat /run/secrets/S3_BUCKET_NAME) \
|
54 |
S3_REGION=${NC_S3_REGION} \
|
55 |
S3_ENDPOINT=${NC_S3_ENDPOINT} \
|
56 |
S3_ACCESS_KEY=${NC_S3_ACCESS_KEY} \
|
57 |
+
S3_ACCESS_SECRET=$(cat /run/secrets/NC_S3_ACCESS_SECRET) \
|
58 |
+
LITESTREAM_S3_BUCKET=$(cat /run/secrets/S3_BUCKET_NAME)\
|
59 |
LITESTREAM_S3_REGION=${NC_S3_REGION} \
|
60 |
LITESTREAM_S3_ENDPOINT=${NC_S3_ENDPOINT} \
|
61 |
LITESTREAM_S3_ACCESS_KEY_ID=${NC_S3_ACCESS_KEY} \
|
62 |
+
LITESTREAM_S3_SECRET_ACCESS_KEY=$(cat /run/secrets/NC_S3_ACCESS_SECRET)
|
63 |
|
64 |
EXPOSE 8080
|
65 |
|