2024-10-08T21-17-18Z

Dockerfile

@@ -19,13 +19,20 @@ ENV STATIC_BACKEND=whitenoise.storage.CompressedManifestStaticFilesStorage
 ENV DEBUG=True
 
 # Set environment variables (sensitive) using Hugging Face secrets management
-ENV DBHOST=$(cat /run/secrets/DBHOST)
-ENV DBNAME=$(cat /run/secrets/DBNAME)
-ENV DBUSER=$(cat /run/secrets/DBUSER)
-ENV DBPASS=$(cat /run/secrets/DBPASS)
-ENV DBSSL=$(cat /run/secrets/DBSSL)
-ENV SECRET_KEY=$(cat /run/secrets/SECRET_KEY)
-ENV OPENAI_API_KEY=$(cat /run/secrets/OPENAI_API_KEY)
+RUN --mount=type=secret,id=DBHOST,mode=0444,required=true \
+    --mount=type=secret,id=DBNAME,mode=0444,required=true \
+    --mount=type=secret,id=DBUSER,mode=0444,required=true \
+    --mount=type=secret,id=DBPASS,mode=0444,required=true \
+    --mount=type=secret,id=DBSSL,mode=0444,required=true \
+    --mount=type=secret,id=SECRET_KEY,mode=0444,required=true \
+    --mount=type=secret,id=OPENAI_API_KEY,mode=0444,required=true \
+    export DBHOST=$(cat /run/secrets/DBHOST) && \
+    export DBNAME=$(cat /run/secrets/DBNAME) && \
+    export DBUSER=$(cat /run/secrets/DBUSER) && \
+    export DBPASS=$(cat /run/secrets/DBPASS) && \
+    export DBSSL=$(cat /run/secrets/DBSSL) && \
+    export SECRET_KEY=$(cat /run/secrets/SECRET_KEY) && \
+    export OPENAI_API_KEY=$(cat /run/secrets/OPENAI_API_KEY)
 
 # Run the Django application
 CMD ["python3", "src/manage.py", "runserver", "0.0.0.0:8000"]