muyu-apiserver/deploy/Dockerfile.purchase
Chever John a5b1b406ea security: remove hardcoded credentials and add envsubst for go-zero configs
- Clear default passwords in all service configs and local dev YAMLs
- Add entrypoint.sh with envsubst to resolve ${ENV} vars in go-zero YAML
- Update Dockerfiles to install gettext and use entrypoint
- Update docker-compose to pass secrets via environment and require via ${VAR:?...}
- Add .gitignore rules for .env files, add .env.example template

Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-17 23:16:28 +08:00

10 lines
288 B
Docker

FROM alpine:3.19
RUN apk add --no-cache ca-certificates tzdata gettext
WORKDIR /app
COPY deploy/bin/purchase .
COPY deploy/etc/purchase.yaml etc/purchase.yaml
COPY deploy/entrypoint.sh /entrypoint.sh
EXPOSE 9003
ENTRYPOINT ["/entrypoint.sh"]
CMD ["./purchase", "-f", "etc/purchase.yaml"]