soconnor/beenvoice-web
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove default access and secret keys for S3 in Docker Compose files for security enhancement

Browse Source
This commit is contained in:
soconnor
2026-06-29 01:15:05 -04:00
parent 122a3c64f5
commit a66d05f24f
2 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-compose.coolify-garage.yml
+3 -3
View File
@@ -21,8 +21,8 @@ services:
garage: garage:
image: dxflrs/garage:v2.3.0 image: dxflrs/garage:v2.3.0
environment: environment:
GARAGE_DEFAULT_ACCESS_KEY: ${S3_ACCESS_KEY:-GK3515373e4c851ebaad366558} GARAGE_DEFAULT_ACCESS_KEY: ${S3_ACCESS_KEY}
GARAGE_DEFAULT_SECRET_KEY: ${S3_SECRET_KEY:-7d37d093435a41f2aab8f13c19ba067d9776c90215f56614adad6ece597dbb34} GARAGE_DEFAULT_SECRET_KEY: ${S3_SECRET_KEY}
GARAGE_DEFAULT_BUCKET: ${S3_BUCKET:-beenvoice-receipts} GARAGE_DEFAULT_BUCKET: ${S3_BUCKET:-beenvoice-receipts}
SERVICE_FQDN_GARAGE_3900: SERVICE_FQDN_GARAGE_3900:
configs: configs:
@@ -56,7 +56,7 @@ configs:
rpc_bind_addr = "[::]:3901" rpc_bind_addr = "[::]:3901"
rpc_public_addr = "garage:3901" rpc_public_addr = "garage:3901"
rpc_secret = "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f" rpc_secret = "rpc_secret_change_me_in_production"
[s3_api] [s3_api]
s3_region = "garage" s3_region = "garage"
docker-compose.coolify.yml
+5 -5
View File
@@ -38,8 +38,8 @@ services:
AUTHENTIK_ORIGIN: ${AUTHENTIK_ORIGIN:-} AUTHENTIK_ORIGIN: ${AUTHENTIK_ORIGIN:-}
S3_ENDPOINT: http://garage:3900 S3_ENDPOINT: http://garage:3900
S3_BUCKET: ${S3_BUCKET:-beenvoice-receipts} S3_BUCKET: ${S3_BUCKET:-beenvoice-receipts}
S3_ACCESS_KEY: ${S3_ACCESS_KEY:-GK3515373e4c851ebaad366558} S3_ACCESS_KEY: ${S3_ACCESS_KEY}
S3_SECRET_KEY: ${S3_SECRET_KEY:-7d37d093435a41f2aab8f13c19ba067d9776c90215f56614adad6ece597dbb34} S3_SECRET_KEY: ${S3_SECRET_KEY}
S3_REGION: ${S3_REGION:-garage} S3_REGION: ${S3_REGION:-garage}
expose: expose:
- "3000" - "3000"
@@ -69,8 +69,8 @@ services:
garage: garage:
image: dxflrs/garage:v2.3.0 image: dxflrs/garage:v2.3.0
environment: environment:
GARAGE_DEFAULT_ACCESS_KEY: ${S3_ACCESS_KEY:-GK3515373e4c851ebaad366558} GARAGE_DEFAULT_ACCESS_KEY: ${S3_ACCESS_KEY}
GARAGE_DEFAULT_SECRET_KEY: ${S3_SECRET_KEY:-7d37d093435a41f2aab8f13c19ba067d9776c90215f56614adad6ece597dbb34} GARAGE_DEFAULT_SECRET_KEY: ${S3_SECRET_KEY}
GARAGE_DEFAULT_BUCKET: ${S3_BUCKET:-beenvoice-receipts} GARAGE_DEFAULT_BUCKET: ${S3_BUCKET:-beenvoice-receipts}
SERVICE_FQDN_GARAGE_3900: SERVICE_FQDN_GARAGE_3900:
configs: configs:
@@ -105,7 +105,7 @@ configs:
rpc_bind_addr = "[::]:3901" rpc_bind_addr = "[::]:3901"
rpc_public_addr = "garage:3901" rpc_public_addr = "garage:3901"
rpc_secret = "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f" rpc_secret = "rpc_secret_change_me_in_production"
[s3_api] [s3_api]
s3_region = "garage" s3_region = "garage"