Miniflux: run postgres as app user
This commit is contained in:
@@ -35,15 +35,18 @@ services:
|
|||||||
miniflux_postgres:
|
miniflux_postgres:
|
||||||
image: postgres:16.3-bookworm
|
image: postgres:16.3-bookworm
|
||||||
container_name: miniflux_postgres
|
container_name: miniflux_postgres
|
||||||
|
user: "{{ user_create_result.uid }}:{{ user_create_result.group }}"
|
||||||
environment:
|
environment:
|
||||||
- POSTGRES_USER={{ miniflux_postgres_user }}
|
- POSTGRES_USER={{ miniflux_postgres_user }}
|
||||||
- POSTGRES_PASSWORD={{ miniflux_postgres_password }}
|
- POSTGRES_PASSWORD_FILE=/secrets/miniflux_postgres_password
|
||||||
- POSTGRES_DB={{ miniflux_postgres_database }}
|
- POSTGRES_DB={{ miniflux_postgres_database }}
|
||||||
networks:
|
networks:
|
||||||
- "miniflux_network"
|
- "miniflux_network"
|
||||||
- "monitoring_network"
|
- "monitoring_network"
|
||||||
volumes:
|
volumes:
|
||||||
- {{ postgres_data_dir }}:/var/lib/postgresql/data
|
- "/etc/passwd:/etc/passwd:ro"
|
||||||
|
- "{{ secrets_dir }}:/secrets:ro"
|
||||||
|
- "{{ postgres_data_dir }}:/var/lib/postgresql/data"
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: ["CMD", "pg_isready", "--username={{ miniflux_postgres_user }}", "--dbname={{ miniflux_postgres_database }}"]
|
test: ["CMD", "pg_isready", "--username={{ miniflux_postgres_user }}", "--dbname={{ miniflux_postgres_database }}"]
|
||||||
interval: 10s
|
interval: 10s
|
||||||
|
@@ -46,6 +46,7 @@
|
|||||||
- "miniflux_admin_password"
|
- "miniflux_admin_password"
|
||||||
- "miniflux_oidc_client_id"
|
- "miniflux_oidc_client_id"
|
||||||
- "miniflux_oidc_client_secret"
|
- "miniflux_oidc_client_secret"
|
||||||
|
- "miniflux_postgres_password"
|
||||||
|
|
||||||
- name: "Copy docker compose file"
|
- name: "Copy docker compose file"
|
||||||
ansible.builtin.template:
|
ansible.builtin.template:
|
||||||
|
Reference in New Issue
Block a user