restrict envsubst to expected variables only

2026-03-20 16:25:23 -04:00
parent 9e3996a72b
commit 5abfca19b3
1 changed files with 1 additions and 1 deletions
@@ -5,4 +5,4 @@ FROM base
 COPY --from=dxflrs/garage:v2.2.0 /garage /garage
 COPY garage.toml /etc/garage.toml.tpl

-CMD envsubst < /etc/garage.toml.tpl > /etc/garage.toml && exec /garage server
+CMD envsubst '${RPC_SECRET} ${ARGENTO_NODE_ID} ${ADMIN_TOKEN}' < /etc/garage.toml.tpl > /etc/garage.toml && exec /garage server