service: Better use podman secrets for database passwords

This commit is contained in:
uumas
2025-04-04 22:15:06 +03:00
parent 68b3dcb49c
commit 7b46279c63
6 changed files with 17 additions and 23 deletions

View File

@@ -2,6 +2,9 @@
_service_template_mounts: "{{ service_container_mounts | selectattr('type', '==', 'template') | list }}"
_service_host_directory: "/srv/{{ service_name }}"
_service_setup_database: "{{ service_database_type != 'none' }}"
_service_database_name: "{{ service_name }}-{{ service_database_type }}"
_service_container_secrets: >
{{
service_container_secrets
@@ -11,6 +14,7 @@ _service_container_secrets: >
| map('community.general.dict_kv', 'name')
)
| map('combine')
+ ([{'name': _service_database_name }] if _service_setup_database else [])
}}
_service_container_wants: "{{ service_wants + ([service_name + '-socat.socket'] if service_domains | length > 0 else []) }}"