fix(deploy): separate reactive resume auth_secret from famapp

- rename AUTH_SECRET to RESUME_AUTH_SECRET in production .env and compose
  app service — famapp's AUTH_SECRET is now unambiguous
- remove orphaned stale AUTH_SECRET entry from .env
- apply-compose.ps1: pull + restart famapp immediately after pushing compose
  rather than waiting for watchtower; uses dc alias via bash -ic
- update .env.production.example to reflect corrected variable names
This commit is contained in:
ginnoir
2026-06-02 19:12:34 -05:00
parent 23a14e1650
commit aae3e30843
+2 -2
View File
@@ -18,8 +18,8 @@ FAMAPP_DB_PASSWORD=replace-with-strong-password
FAMAPP_DB_NAME=famapp
# Auth.js session secret — generate with: openssl rand -base64 32
# NOTE: the monolith .env also uses AUTH_SECRET for Reactive Resume.
# Docker Compose uses the last occurrence. Keep famapp's entry last.
# NOTE: Reactive Resume uses RESUME_AUTH_SECRET; AUTH_SECRET is famapp-only.
AUTH_SECRET=replace-with-openssl-rand-base64-32
# OIDC provider (Authentik) — fill in after bootstrapping Authentik