Prevent Coolify image from embedding replication snapshots
This commit is contained in:
@@ -1 +1,7 @@
|
|||||||
/docker-compose.yml
|
/docker-compose.yml
|
||||||
|
|
||||||
|
# Runtime-generated replication bootstrap snapshots may contain infrastructure
|
||||||
|
# metadata and encrypted/plaintext credential material. They must be
|
||||||
|
# supplied at runtime via mounted storage, not baked into deployment images.
|
||||||
|
/services/nginx/app/storage/replication-bootstrap.json
|
||||||
|
/services/nginx/app/storage/replication-bootstrap-*.json
|
||||||
|
|||||||
@@ -51,6 +51,7 @@ COPY services/coolify/api/nginx.conf /etc/nginx/nginx.conf
|
|||||||
COPY services/coolify/api/start.sh /usr/local/bin/coolify-api-start
|
COPY services/coolify/api/start.sh /usr/local/bin/coolify-api-start
|
||||||
|
|
||||||
RUN set -eux; \
|
RUN set -eux; \
|
||||||
|
rm -f /var/www/html/storage/replication-bootstrap.json /var/www/html/storage/replication-bootstrap-*.json; \
|
||||||
sed -i 's/\r$//' /usr/local/bin/docker-entrypoint.sh /usr/local/bin/coolify-api-start; \
|
sed -i 's/\r$//' /usr/local/bin/docker-entrypoint.sh /usr/local/bin/coolify-api-start; \
|
||||||
chmod +x /usr/local/bin/docker-entrypoint.sh /usr/local/bin/coolify-api-start; \
|
chmod +x /usr/local/bin/docker-entrypoint.sh /usr/local/bin/coolify-api-start; \
|
||||||
COMPOSER_ALLOW_SUPERUSER=1 composer install --no-dev --prefer-dist --optimize-autoloader --no-interaction -d /var/www/html; \
|
COMPOSER_ALLOW_SUPERUSER=1 composer install --no-dev --prefer-dist --optimize-autoloader --no-interaction -d /var/www/html; \
|
||||||
|
|||||||
Reference in New Issue
Block a user