refactor: move more sensitive values into .env for simpler configuration

- Move Vikunja DB user/password/database and JWT secret to environment variables
- Update .env.example with clear sections and 'change-me' placeholders
- Update SECURITY.md to reflect that more secrets now live in .env
This commit is contained in:
peskyadmin
2026-08-02 16:34:12 -04:00
parent 0ca4b8897b
commit 8e3df8934a
3 changed files with 24 additions and 4 deletions

View File

@@ -36,10 +36,10 @@ services:
environment:
VIKUNJA_DATABASE_TYPE: postgres
VIKUNJA_DATABASE_HOST: 127.0.0.1
VIKUNJA_DATABASE_USER: vikunja
VIKUNJA_DATABASE_PASSWORD: testpassword123
VIKUNJA_DATABASE_DATABASE: vikunja
VIKUNJA_SERVICE_JWTSECRET: testpassword123
VIKUNJA_DATABASE_USER: ${VIKUNJA_DATABASE_USER}
VIKUNJA_DATABASE_PASSWORD: ${VIKUNJA_DATABASE_PASSWORD}
VIKUNJA_DATABASE_DATABASE: ${VIKUNJA_DATABASE_DATABASE}
VIKUNJA_SERVICE_JWTSECRET: ${VIKUNJA_SERVICE_JWTSECRET}
VIKUNJA_SERVICE_PUBLICURL: ${VIKUNJA_SERVICE_PUBLICURL}
VIKUNJA_SERVICE_FRONTENDURL: ${VIKUNJA_SERVICE_FRONTENDURL}
volumes: