Skip to content

Shared database security #324

@jcalfee

Description

@jcalfee

Do you have a way to keep the database password hidden from the linked app? For security, I would like all linked apps to use their own login. I gather that I can config:set each app with its own DATABASE_URL, however, I noticed there are other variables as well that contain the password. I assume that I can't simply change the password outside of dokku without breaking something (backups for example).

DOKKU_POSTGRES_AQUA_URL
DOKKU_POSTGRES_BLACK_URL
DOKKU_POSTGRES_BLUE_URL

And in the future? If there is a simple future-proof way to keep the credential separate from the app in the container then the end-user can handle any setup requirements that comes along by falling back to config:set and without risking any exposure to the main postgres login.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions