Improve container security by removing hardcoded password

[kazan417]

This removes hardcoded password from dockerfile and adds variable PASS to entrypoint

[wxiaoguang]

1. The "git:*" is not hard-coded password: it just makes the account to be "unlocked" and unable to login via password.
2. The git account shouldn't have a password set, it is designed to disallow password login. So passing PASS env breaks the design.

Could you elaborate why you need this change? TBH I think it only lowers the security if some users mis-configured the "PASS" env.

[kazan417]

1. The "git:*" is not hard-coded password: it just makes the account to be "unlocked" and unable to login via password.
2. The git account shouldn't have a password set, it is designed to disallow password login. So passing PASS env breaks the design.

Could you elaborate why you need this change? TBH I think it only lowers the security if some users mis-configured the "PASS" env.

1. Sorry for my bad knowledge.
2. Realistically no need PASS variable. It was added because of misunderstood design of gitea.
3. Thank you for explanation.