DAM/ts-vikunja
2
0
Fork 0
generated from DAM/ts-TEMPLATE
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: move more sensitive values into .env for simpler configuration

Browse Source 
- Move Vikunja DB user/password/database and JWT secret to environment variables
- Update .env.example with clear sections and 'change-me' placeholders
- Update SECURITY.md to reflect that more secrets now live in .env
This commit is contained in:
peskyadmin
2026-08-02 16:34:12 -04:00
parent 0ca4b8897b
commit 8e3df8934a
3 changed files with 24 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
.env.example
View File

@@ -20,3 +20,14 @@ VIKUNJA_SERVICE_PUBLICURL=http://vikunja.your-tailnet.ts.net
# Frontend URL (usually the same as PUBLICURL) # Frontend URL (usually the same as PUBLICURL)
VIKUNJA_SERVICE_FRONTENDURL=http://vikunja.your-tailnet.ts.net VIKUNJA_SERVICE_FRONTENDURL=http://vikunja.your-tailnet.ts.net
# ==========================================
# Database Configuration (Vikunja)
# ==========================================
VIKUNJA_DATABASE_USER=vikunja
VIKUNJA_DATABASE_PASSWORD=change-me
VIKUNJA_DATABASE_DATABASE=vikunja
# Vikunja JWT secret (change this!)
VIKUNJA_SERVICE_JWTSECRET=change-me

9
SECURITY.md
View File

@@ -28,3 +28,12 @@ The `docker-compose.yml` file contains placeholder values (`***`) for sensitive
- Vikunja JWT secret - Vikunja JWT secret
**Change these values** before deploying anywhere security matters. Never use the default placeholders in production or shared environments. **Change these values** before deploying anywhere security matters. Never use the default placeholders in production or shared environments.
## Environment File
The `.env` file now contains additional sensitive values including:
- Database credentials
- Vikunja JWT secret
**Never commit your `.env` file.** Always use `.env.example` as a template and keep real values private.

8
docker-compose.yml
View File

@@ -36,10 +36,10 @@ services:
environment: environment:
VIKUNJA_DATABASE_TYPE: postgres VIKUNJA_DATABASE_TYPE: postgres
VIKUNJA_DATABASE_HOST: 127.0.0.1 VIKUNJA_DATABASE_HOST: 127.0.0.1
VIKUNJA_DATABASE_USER: vikunja VIKUNJA_DATABASE_USER: ${VIKUNJA_DATABASE_USER}
VIKUNJA_DATABASE_PASSWORD: testpassword123 VIKUNJA_DATABASE_PASSWORD: ${VIKUNJA_DATABASE_PASSWORD}
VIKUNJA_DATABASE_DATABASE: vikunja VIKUNJA_DATABASE_DATABASE: ${VIKUNJA_DATABASE_DATABASE}
VIKUNJA_SERVICE_JWTSECRET: testpassword123 VIKUNJA_SERVICE_JWTSECRET: ${VIKUNJA_SERVICE_JWTSECRET}
VIKUNJA_SERVICE_PUBLICURL: ${VIKUNJA_SERVICE_PUBLICURL} VIKUNJA_SERVICE_PUBLICURL: ${VIKUNJA_SERVICE_PUBLICURL}
VIKUNJA_SERVICE_FRONTENDURL: ${VIKUNJA_SERVICE_FRONTENDURL} VIKUNJA_SERVICE_FRONTENDURL: ${VIKUNJA_SERVICE_FRONTENDURL}
volumes: volumes: