Suggest using .env (and protect with .gitignore). (#959)

Signed-off-by: Kurt Garloff <[email protected]>

Author: garloff

compliance-monitor/.gitignore

@@ -0,0 +1 @@
+.env

compliance-monitor/docker-compose.yml

@@ -28,7 +28,7 @@ services:
       - SCM_DB_HOST=postgres
       - SCM_DB_PORT=5432
       - SCM_DB_PASSWORD_FILE=/run/secrets/db_password
-      # pass the following two from the shell
+      # pass the following two from the shell or put them into .env
       - SCM_HC_USER
       - SCM_HC_PASSWORD
       - SCM_BASE_URL=https://compliance.sovereignit.cloud/