Persist JWT signing key in dedicated /data folder by default (#128)

Author: jbern0rd

CHANGELOG.md

@@ -17,6 +17,10 @@ All notable changes to this project will be documented in this file.
 - Verify TEE tasks `enclaveSignature` before accepting IPFS upload. (#125 #126)
 - Persist `WorkerpoolAuthorization` instances to MongoDB. (#127)
 
+### Bug Fixes
+
+- Persist JWT signing key in dedicated `/data` folder by default. (#128)
+
 ### Quality
 
 - Remove results download endpoints which are never used. (#117)

Dockerfile

@@ -13,7 +13,8 @@ RUN groupadd --system appuser \
 
 WORKDIR /app
 COPY $jar iexec-result-proxy.jar
-RUN chown -R appuser:appuser /app
+RUN mkdir /data
+RUN chown -R appuser:appuser /app /data
 
 USER appuser
 ENTRYPOINT [ "java", "-Djava.security.egd=file:/dev/./urandom", "-jar", "iexec-result-proxy.jar" ]

src/main/resources/application.yml

@@ -23,7 +23,7 @@ ipfs:
   port: ${IEXEC_IPFS_PORT:5001}
 
 jwt:
-  key-path: /app/jwt-sign.key
+  key-path: /data/jwt-sign.key
 
 springdoc:
   packagesToScan: com.iexec.resultproxy