Pass Postgres Password to Docker Compose

Author: waleedbaroudi

.github/workflows/deploy_aws.yml

@@ -39,4 +39,5 @@ jobs:
           LANGSMITH_API_KEY: ${{ secrets.LANGSMITH_API_KEY }}
           GRAFANA_ADMIN_USERNAME: ${{ secrets.GRAFANA_ADMIN_USERNAME }}
           GRAFANA_ADMIN_PASSWORD: ${{ secrets.GRAFANA_ADMIN_PASSWORD }}
+          POSTGRES_PASSWORD: ${{ secrets.POSTGRES_PASSWORD }}
         run: ansible-playbook -i inventory.ini ansible/deploy.yml

ansible/tasks/env_vars.yml

@@ -5,4 +5,5 @@
     open_webui_api_key_gen: "{{ lookup('env', 'OPEN_WEBUI_API_KEY_GEN') }}"
     langsmith_api_key: "{{ lookup('env', 'LANGSMITH_API_KEY') }}"
     grafana_admin_username: "{{ lookup('env', 'GRAFANA_ADMIN_USERNAME') }}"
-    grafana_admin_password: "{{ lookup('env', 'GRAFANA_ADMIN_PASSWORD') }}"
+    grafana_admin_password: "{{ lookup('env', 'GRAFANA_ADMIN_PASSWORD') }}"
+    postgres_password: "{{ lookup('env', 'POSTGRES_PASSWORD') }}"

docker-compose.yml.j2

@@ -44,8 +44,8 @@ services:
       - "traefik.http.services.auth.loadbalancer.server.port=8083"
     environment:
       - SPRING_DATASOURCE_URL=jdbc:postgresql://postgres:5432/auth_db
-      - SPRING_DATASOURCE_USERNAME=postgres # TODO: replace with env variable
-      - SPRING_DATASOURCE_PASSWORD=postgres
+      - SPRING_DATASOURCE_USERNAME=postgres
+      - SPRING_DATASOURCE_PASSWORD="{{ postgres_password }}"
     depends_on:
       - postgres
 
@@ -64,7 +64,7 @@ services:
     environment:
       - SPRING_DATASOURCE_URL=jdbc:postgresql://postgres:5432/document_db
       - SPRING_DATASOURCE_USERNAME=postgres
-      - SPRING_DATASOURCE_PASSWORD=postgres
+      - SPRING_DATASOURCE_PASSWORD="{{ postgres_password }}"
     depends_on:
       - postgres
 
@@ -128,7 +128,7 @@ services:
       - "5432:5432"
     environment: # TODO: replace values with an env variables & secrets
       POSTGRES_USER: postgres
-      POSTGRES_PASSWORD: postgres
+      POSTGRES_PASSWORD: "{{ postgres_password }}"
       POSTGRES_DB: postgres
       POSTGRES_MULTIPLE_DATABASES: auth_db,document_db
     volumes: