From 1c7f3c011854e03e6c89b926cc1ee250a8a4da03 Mon Sep 17 00:00:00 2001
From: devyouz <webmestre@aqdr.org>
Date: Tue, 19 May 2026 05:13:42 +0000
Subject: [PATCH] Move secrets out of compose into env vars

---
 docker-compose.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 00b1545..6357084 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,7 +5,7 @@ services:
     environment:
       POSTGRES_DB: tinovisas
       POSTGRES_USER: tinovisas
-      POSTGRES_PASSWORD: tinovisas_secret_2024
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
     volumes:
       - postgres_data:/var/lib/postgresql/data
       - ./postgres-init:/docker-entrypoint-initdb.d
@@ -44,18 +44,18 @@ services:
       DB_PORT: 5432
       DB_NAME: tinovisas
       DB_USER: tinovisas
-      DB_PASSWORD: tinovisas_secret_2024
+      DB_PASSWORD: ${POSTGRES_PASSWORD}
       REDIS_HOST: redis
       REDIS_PORT: 6379
-      JWT_SECRET: tinovisas_super_secret_key_change_me
+      JWT_SECRET: ${JWT_SECRET}
       JWT_EXPIRES_IN: 24h
-      ENCRYPTION_KEY: tinovisas_encryption_key_32chars!!
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
       UPLOAD_DIR: /app/uploads
       MAX_FILE_SIZE: 10485760
       PLAYWRIGHT_HEADLESS: "true"
       PLAYWRIGHT_TIMEOUT: 30000
-      DEFAULT_ADMIN_EMAIL: admin@tinovisas.com
-      DEFAULT_ADMIN_PASSWORD: Admin123!
+      DEFAULT_ADMIN_EMAIL: ${DEFAULT_ADMIN_EMAIL}
+      DEFAULT_ADMIN_PASSWORD: ${DEFAULT_ADMIN_PASSWORD}
     volumes:
       - uploads_data:/app/uploads
     depends_on: