search

victor-rds / docker-etebase

Docker image files for Etebase server
GNU Affero General Public License v3.0
95 stars 28 forks source link

Compose Production Setup #50

Closed besendorf closed 3 years ago

besendorf commented 3 years ago

I wanted to migrate to etebase 2.0 but Im confused by the README.md for the compuse setup. It says: "As an example, this should not be used in real production without changes, this script will initialize a PostgreSQL DB with unsafe options, all the data is saved on docker volumes created by the compose file, be aware this is may not work in your particular setup."

However this is inside the production folder and also linked on the main README.md which I find very confusing. When looking at the docker-compose.yml The configuration looks quite resonably to me. Passwords are set for postgresql and the databse isnt exposed to the host.

Could you clearify if this is suitable for production or what exactly needs to be changed?

victor-rds commented 3 years ago

Hi, it's just a warning for people that just copy n' paste without changing the default passwords , also I don't recommend leaving passwords as environment variables after the initial setup, and if possible please use secrets for both etebase and postgres.

Also pointing out use of volumes, since the volume is created by the compose it can be easily destroyed by accident, and may not work with your backup strategy.

Also, the Etebase doesn't save data in the database, according with @tasn the database holds only the metadata, the real encrypted data are stored on the MEDIA_ROOT directory, I've checked and my examples are missing this configuration, I will update them.

besendorf commented 3 years ago

thank you for the clarification.