fix: auth password for production

- set password with runtime env variable

.gitea/workflows/docker-build.yml

@@ -26,14 +26,13 @@ jobs:
       with:
         images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.IMAGE_NAME }}
         tags: |
-          # Keep a moving branch tag (e.g., main)
-          type=ref,event=branch
+          # Latest tag will automatically be generated for the latest tagged release
           # Version tag on releases (e.g., v1.2.3)
           type=ref,event=tag
+          # Keep a moving branch tag (e.g., main)
+          type=ref,event=branch
           # Snapshot tag for commits on the default branch (e.g., snapshot-<hash>)
           type=raw,value=snapshot-{{sha}},enable={{is_default_branch}}
-          # Move "latest" only when building from a tag
-          type=raw,value=latest,enable={{is_tag}}
 
     - name: Log in to Container Registry
       uses: docker/login-action@v3

config/config.exs

@@ -9,8 +9,7 @@ import Config
 
 config :components_elixir,
   ecto_repos: [ComponentsElixir.Repo],
-  generators: [timestamp_type: :utc_datetime],
-  auth_password: System.get_env("AUTH_PASSWORD", "changeme")
+  generators: [timestamp_type: :utc_datetime]
 
 # Configures the endpoint
 config :components_elixir, ComponentsElixirWeb.Endpoint,

config/runtime.exs

@@ -2,7 +2,8 @@ import Config
 
 # Runtime configuration for uploads directory
 config :components_elixir,
-  uploads_dir: System.get_env("UPLOADS_DIR", "./uploads")
+  uploads_dir: System.get_env("UPLOADS_DIR", "./uploads"),
+  auth_password: System.get_env("AUTH_PASSWORD", "changeme")
 
 # config/runtime.exs is executed for all environments, including
 # during releases. It is executed after compilation and before the

docker-compose.yml.example

@@ -26,6 +26,7 @@ services:
       PHX_SERVER: "true"
       PORT: "4000"
       UPLOADS_DIR: "/data/uploads"
+      AUTH_PASSWORD: "changeme!"
     depends_on:
       db:
         condition: service_healthy