.env should be mounted, not copied #167

New issue

Closed

opened 2025-12-08 06:28:38 -05:00 by sirdog3355 · 1 comment

sirdog3355 commented

2025-12-08 06:28:38 -05:00

(Migrated from github.com)

For security, given that an image could be taken and used to get the .env file and thus sensitive tokens, .env should be mounted onto the Docker volume from the production server rather than copied onto the image.

For security, given that an image could be taken and used to get the `.env` file and thus sensitive tokens, `.env` should be mounted onto the Docker volume from the production server rather than copied onto the image.

sirdog3355 commented

2025-12-15 01:12:05 -05:00

(Migrated from github.com)

Resolved by #184. Documentation does not need to be updated. Closing as completed.