mptyl/ThothII
1
0
Fork 0
Code Issues 25 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix(deploy): validate session migrator TLS mode

Browse Source
This commit is contained in:
User
2026-07-16 19:07:53 +02:00
parent cadc4c6947
commit 7a65fc80a2
6 changed files with 96 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/compose.session-server.yaml.example
+3 -6
View File
@@ -27,18 +27,15 @@ services:
session-migrate:
image: thothii-core:local
profiles: [session-migrate]
entrypoint: [/bin/sh, -ec]
command: >-
export PGPASSWORD="$$(cat /run/secrets/session_migrator_password)";
exec /opt/venv/bin/tht session migrate --database-url
"postgresql+psycopg2://$${THT_SESSION_MIGRATOR_USER}@$${THT_SESSION_DB_HOST}:$${THT_SESSION_DB_PORT}/$${THT_SESSION_DB_NAME}?sslmode=$${THT_SESSION_DB_SSLMODE}&sslrootcert=/run/secrets/session_ca.pem"
--json
entrypoint: [/app/docker/session-migrate.sh]
environment:
THT_SESSION_DB_HOST: ${THT_SESSION_DB_HOST:?set THT_SESSION_DB_HOST}
THT_SESSION_DB_PORT: ${THT_SESSION_DB_PORT:-5432}
THT_SESSION_DB_NAME: ${THT_SESSION_DB_NAME:?set THT_SESSION_DB_NAME}
THT_SESSION_MIGRATOR_USER: ${THT_SESSION_MIGRATOR_USER:?set THT_SESSION_MIGRATOR_USER}
THT_SESSION_MIGRATOR_PASSWORD_FILE: /run/secrets/session_migrator_password
THT_SESSION_DB_SSLMODE: ${THT_SESSION_DB_SSLMODE:-verify-full}
THT_SESSION_DB_SSLROOTCERT: /run/secrets/session_ca.pem
secrets:
- source: session_migrator_password
target: session_migrator_password