dave/coolify
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Update app/Jobs/ApplicationDeploymentJob.php

Browse Source 
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
This commit is contained in:
Andras Bacsai
2025-09-16 18:20:36 +02:00
committed by GitHub
parent efbbe76310
commit c182cac032
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
app/Jobs/ApplicationDeploymentJob.php
View File

@@ -2665,14 +2665,16 @@ COPY ./nginx.conf /etc/nginx/conf.d/default.conf");
// Generate a secret file for each environment variable // Generate a secret file for each environment variable
foreach ($variables as $key => $value) { foreach ($variables as $key => $value) {
$secret_file = "{$this->secrets_dir}/{$key}"; // keep id as-is, sanitize only filename
$safe_filename = preg_replace('/[^A-Za-z0-9._-]/', '_', (string) $key);
$secret_file_path = "{$this->secrets_dir}/{$safe_filename}";
$escaped_value = base64_encode($value); $escaped_value = base64_encode($value);
$this->execute_remote_command([executeInDocker($this->deployment_uuid, $this->execute_remote_command([executeInDocker($this->deployment_uuid,
"echo '{$escaped_value}' | base64 -d > {$secret_file} && chmod 600 {$secret_file}" "echo '{$escaped_value}' | base64 -d > {$secret_file_path} && chmod 600 {$secret_file_path}"
), 'hidden' => true]); ), 'hidden' => true]);
$this->build_secrets->push("--secret id={$key},src={$secret_file}"); $this->build_secrets->push("--secret id={$key},src={$secret_file_path}");
} }
$this->build_secrets = $this->build_secrets->implode(' '); $this->build_secrets = $this->build_secrets->implode(' ');