From 8d6f446d2a49703df31b4c3667d4609f5c98a76b Mon Sep 17 00:00:00 2001
From: stef <stef@infra.bv.stef.lan>
Date: Thu, 11 Dec 2025 22:06:40 +0100
Subject: [PATCH] externalisation des credentials

---
 .gitignore         | 1 +
 docker-compose.yml | 8 ++++----
 2 files changed, 5 insertions(+), 4 deletions(-)
 create mode 100644 .gitignore

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..4c49bd7
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+.env
diff --git a/docker-compose.yml b/docker-compose.yml
index 55a37a4..0a0bfd3 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,8 +4,8 @@ services:
     container_name: pki-mongodb
     restart: always
     environment:
-      MONGO_INITDB_ROOT_USERNAME: admin
-      MONGO_INITDB_ROOT_PASSWORD: admin123
+      MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
+      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
       MONGO_INITDB_DATABASE: pki_db
     volumes:
       - mongodb_data:/data/db
@@ -19,8 +19,8 @@ services:
     ports:
       - "8080:8080"
     environment:
-      MONGODB_URI: mongodb://admin:admin123@mongodb:27017/pki_db?authSource=admin
-      JWT_SECRET: your-super-secret-jwt-key-change-this
+      MONGODB_URI: mongodb://${MONGO_INITDB_ROOT_USERNAME}:${MONGO_INITDB_ROOT_PASSWORD}@mongodb:27017/pki_db?authSource=admin
+      JWT_SECRET: ${JWT_SECRET} 
     volumes:
       - ./certs:/app/certs
       - ./internal/web/static:/app/internal/web/static