feat(compose): use one secret bundle for local services

2026-07-12 11:30:43 +02:00
parent 32a2b71687
commit 70a19f290d
15 changed files with 411 additions and 84 deletions
@@ -0,0 +1,9 @@
+#!/bin/sh
+set -eu
+
+. /opt/thoth/secret-policy.sh
+
+bundle=${THT_SECRETS_FILE:-/run/secrets/thothii.secrets}
+export POSTGRES_PASSWORD=$(read_bundle_secret "$bundle" THT_VECTOR_BOOTSTRAP_PASSWORD)
+unset THT_SECRETS_FILE
+exec /usr/local/bin/docker-entrypoint.sh postgres