push

Dockerfile

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1.3
 ARG PYTHON_VERSION=3.12-slim-bullseye
 
 FROM python:${PYTHON_VERSION}
@@ -40,11 +41,23 @@ COPY . /code
 
 WORKDIR /code
 
-# Run migrations
-RUN python manage.py makemigrations
-RUN python manage.py migrate --database=default
-RUN python manage.py migrate --database=cache
-RUN python manage.py migrate --database=DB1
-RUN python manage.py migrate --database=DB2
+# Use secrets during build
+RUN --mount=type=secret,id=HOST,required=true \
+    --mount=type=secret,id=DJANGO_SECRET,required=true \
+    --mount=type=secret,id=SECURE_TOKEN,required=true \
+    --mount=type=secret,id=WORKER_TOKEN,required=true \
+    --mount=type=secret,id=CLOUDFLARE_TURNSTILE_SECRET,required=true \
+    --mount=type=secret,id=REDIS_URL,required=true \
+    bash -c 'source /run/secrets/HOST && \
+             source /run/secrets/DJANGO_SECRET && \
+             source /run/secrets/SECURE_TOKEN && \
+             source /run/secrets/WORKER_TOKEN && \
+             source /run/secrets/CLOUDFLARE_TURNSTILE_SECRET && \
+             source /run/secrets/REDIS_URL && \
+             python manage.py makemigrations && \
+             python manage.py migrate --database=default && \
+             python manage.py migrate --database=cache && \
+             python manage.py migrate --database=DB1 && \
+             python manage.py migrate --database=DB2'
 
 CMD ["daphne", "-b", "0.0.0.0", "-p", "7860", "core.asgi:application"]