fix: bind workspace connector configuration safely

2026-08-04 08:22:09 +02:00
parent e5219deab1
commit 37404512ce
8 changed files with 137 additions and 16 deletions
@@ -0,0 +1,16 @@
+# Reviewed direct PostgreSQL/pgvector connector-secret override for workspace-bindings.env.example.
+# Source variables are absolute host paths. Add only matching entries for the selected transport;
+# targets must equal the corresponding THT_WS_*_FILE paths in the bindings env file.
+services:
+  core:
+    secrets:
+      - source: psd_clinical_dwh_password
+        target: psd-clinical-dwh-password
+      - source: psd_clinical_vector_password
+        target: psd-clinical-vector-password
+
+secrets:
+  psd_clinical_dwh_password:
+    file: ${THT_WS_PSD_CLINICAL_DWH_PASSWORD_SOURCE:?set THT_WS_PSD_CLINICAL_DWH_PASSWORD_SOURCE}
+  psd_clinical_vector_password:
+    file: ${THT_WS_PSD_CLINICAL_VECTOR_PASSWORD_SOURCE:?set THT_WS_PSD_CLINICAL_VECTOR_PASSWORD_SOURCE}