fix: Docker secrets injection

Author: luigibarbato

Dockerfile

@@ -37,14 +37,9 @@ ENV UNCONDITIONAL_API_FEED_REPO_HOST=${UNCONDITIONAL_API_FEED_REPO_HOST}
 ENV UNCONDITIONAL_API_FEED_REPO_KEY=${UNCONDITIONAL_API_FEED_REPO_KEY}
 ENV UNCONDITIONAL_API_LOG_ENV=${UNCONDITIONAL_API_LOG_ENV}
 
-RUN --mount=type=secret,id=UNCONDITIONAL_API_SOURCE_CLIENT_KEY \
-    --mount=type=secret,id=UNCONDITIONAL_API_FEED_REPO_HOST \
-    --mount=type=secret,id=UNCONDITIONAL_API_FEED_REPO_INDEX \
-    --mount=type=secret,id=UNCONDITIONAL_API_FEED_REPO_KEY \
-    UNCONDITIONAL_API_SOURCE_CLIENT_KEY="$(cat /run/secrets/UNCONDITIONAL_API_SOURCE_CLIENT_KEY)" \
-    UNCONDITIONAL_API_FEED_REPO_HOST="$(cat /run/secrets/UNCONDITIONAL_API_FEED_REPO_HOST)" \
-    UNCONDITIONAL_API_FEED_REPO_KEY="$(cat /run/secrets/UNCONDITIONAL_API_FEED_REPO_KEY)" \
-    /app/main index create --name feeds
+RUN /app/main index create --name feeds \
+    --feed-repo-key="${UNCONDITIONAL_API_FEED_REPO_KEY}" \
+    --feed-repo-host="${UNCONDITIONAL_API_FEED_REPO_HOST}"
 
 FROM scratch as release
 COPY --from=certificator /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

scripts/deploy.sh

@@ -9,9 +9,9 @@ fi
 
 # Deploy
 flyctl deploy --remote-only \
-  --build-secret UNCONDITIONAL_API_SOURCE_CLIENT_KEY="$UNCONDITIONAL_API_SOURCE_CLIENT_KEY" \
-  --build-secret UNCONDITIONAL_API_FEED_REPO_KEY="$UNCONDITIONAL_API_FEED_REPO_KEY" \
-  --build-secret UNCONDITIONAL_API_FEED_REPO_HOST="$UNCONDITIONAL_API_FEED_REPO_HOST" \
-  --build-secret UNCONDITIONAL_API_FEED_REPO_INDEX="$UNCONDITIONAL_API_FEED_REPO_INDEX" \
+  --build-arg UNCONDITIONAL_API_SOURCE_CLIENT_KEY="$UNCONDITIONAL_API_SOURCE_CLIENT_KEY" \
+  --build-arg UNCONDITIONAL_API_FEED_REPO_KEY="$UNCONDITIONAL_API_FEED_REPO_KEY" \
+  --build-arg UNCONDITIONAL_API_FEED_REPO_HOST="$UNCONDITIONAL_API_FEED_REPO_HOST" \
+  --build-arg UNCONDITIONAL_API_FEED_REPO_INDEX="$UNCONDITIONAL_API_FEED_REPO_INDEX" \
   --build-arg UNCONDITIONAL_API_BUILD_COMMIT_VERSION="$UNCONDITIONAL_API_BUILD_COMMIT_VERSION" \
   --build-arg UNCONDITIONAL_API_BUILD_RELEASE_VERSION="$UNCONDITIONAL_API_BUILD_RELEASE_VERSION"