Nacteni citlivych dat z docker secrets

VERSION

-2.4.1
+2.5.0

lib/PZ.pm

@@ -5,8 +5,12 @@ use Mojo::Pg;
 use Mojo::Redis;
 use Mojolicious::Plugin::Authentication;
 use Net::OAuth2::Profile::WebServer;
+use File::Find;
+use Path::Tiny qw( path );
 use PZ::Schema;
 
+use constant SECRETS => '/run/secrets';
+
 sub startup {
     my $self = shift;
 
@@ -14,6 +18,9 @@ sub startup {
     my $cfg = $self->plugin('Config');
     $self->helper( cfg => sub { return $cfg; } );
 
+    # konfigurace z docker secrets (maji prednost!)
+    find(sub { $cfg->{$_} = path(SECRETS . "/$_")->slurp_utf8 }, SECRETS);
+
     # Podpis pro cookies
     $self->secrets($cfg->{session}{secrets});