From 8225be8d2a4ee4f3e19ac5e6555f2a965e613aa7 Mon Sep 17 00:00:00 2001 From: Han Lap Date: Sat, 4 Jul 2026 05:40:48 +0000 Subject: [PATCH] fix: use standard secret file names (db_password.txt, encryption_key.txt) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Revert workaround names (db_pw.txt, enc_key.txt) — fresh deploys only have standard names. Default paths now match what docker compose mounts from secrets/. --- backend/app/config.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/backend/app/config.py b/backend/app/config.py index 6ba8fc9..3768d50 100755 --- a/backend/app/config.py +++ b/backend/app/config.py @@ -18,7 +18,7 @@ class Settings(BaseSettings): # to override whatever password is embedded in DATABASE_URL. Keeps # DB credentials out of plain env vars, consistent with how JWT keys # are already handled. - DB_PASSWORD_FILE: str = "/run/secrets/db_pw.txt" + DB_PASSWORD_FILE: str = "/run/secrets/db_password.txt" # JWT JWT_PRIVATE_KEY_PATH: str = "/run/secrets/jwt_private.pem" @@ -30,7 +30,7 @@ class Settings(BaseSettings): # Encryption ENCRYPTION_KEY: str = "" # If set, ENCRYPTION_KEY is read from this file (Docker secret) instead. - ENCRYPTION_KEY_FILE: str = "/run/secrets/enc_key.txt" + ENCRYPTION_KEY_FILE: str = "/run/secrets/encryption_key.txt" # Redis (shared cache across backend-api / backend-scheduler processes). # Optional: if unreachable, callers fall back to per-process in-memory