Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions 1 Packages Projects Releases 1 Wiki Activity

fix(deploy): MAIL_ENCRYPTION_KEY zu docker-compose.yaml, .env.docker.example und deploy-guide.md hinzugefügt

Browse Source 
Phase B Security-Fix (5d1b239) entfernte den Default-Wert für MAIL_ENCRYPTION_KEY,
aber der Key wurde nie in docker-compose.yaml/.env.docker.example/deploy-guide.md
aufgenommen. Das führte zu Container-Crashs beim Deploy da der Key zwingend
erforderlich ist (mail/services.py RuntimeError).

- docker-compose.yaml: MAIL_ENCRYPTION_KEY in crm_app und crm_worker environment
- .env.docker.example: MAIL_ENCRYPTION_KEY mit Generierungs-Anleitung
- docs/deploy-guide.md: MAIL_ENCRYPTION_KEY in Zugänge-Liste aufgenommen
This commit is contained in:
Agent Zero
2026-08-13 23:50:04 +02:00
parent a4d0f0c35d
commit 60f30d021b
3 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.docker.example
+6
View File
@@ -55,3 +55,9 @@ BCRYPT_ROUNDS=12
# --- Admin user (seeded on first start) -------------------------------------- # --- Admin user (seeded on first start) --------------------------------------
ADMIN_EMAIL=admin@example.com ADMIN_EMAIL=admin@example.com
ADMIN_PASSWORD=Admin123! ADMIN_PASSWORD=Admin123!
# --- MAIL_ENCRYPTION_KEY (REQUIRED) -------------------------------------------
# AES-256 encryption key for mail account passwords (Fernet).
# Generate with:
# python -c "import secrets; print(secrets.token_urlsafe(32))"
MAIL_ENCRYPTION_KEY=GENERATE_STRONG_KEY_HERE
docker-compose.yaml
+2
View File
@@ -93,6 +93,7 @@ services:
BCRYPT_ROUNDS: ${BCRYPT_ROUNDS:-12} BCRYPT_ROUNDS: ${BCRYPT_ROUNDS:-12}
ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@media-on.de} ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@media-on.de}
ADMIN_PASSWORD: ${ADMIN_PASSWORD:-Admin123!} ADMIN_PASSWORD: ${ADMIN_PASSWORD:-Admin123!}
MAIL_ENCRYPTION_KEY: ${MAIL_ENCRYPTION_KEY:?MAIL_ENCRYPTION_KEY is required}
volumes: volumes:
- storage:/data/storage - storage:/data/storage
mem_limit: 512m mem_limit: 512m
@@ -134,6 +135,7 @@ services:
SMTP_PASSWORD: ${SMTP_PASSWORD:-} SMTP_PASSWORD: ${SMTP_PASSWORD:-}
SMTP_FROM: ${SMTP_FROM:-no-reply@localhost} SMTP_FROM: ${SMTP_FROM:-no-reply@localhost}
SMTP_TLS: ${SMTP_TLS:-true} SMTP_TLS: ${SMTP_TLS:-true}
MAIL_ENCRYPTION_KEY: ${MAIL_ENCRYPTION_KEY:?MAIL_ENCRYPTION_KEY is required}
volumes: volumes:
- storage:/data/storage - storage:/data/storage
mem_limit: 256m mem_limit: 256m
docs/deploy-guide.md
+1
View File
@@ -43,6 +43,7 @@ bash /a0/usr/projects/leocrm/scripts/fast-deploy.sh full
- Produktions-DB: postgresql+asyncpg://crm_user:86FkF5vJ_qKYgO6Myj0eQ4Dtm3Dyb1ge@postgres:5432/crm_db - Produktions-DB: postgresql+asyncpg://crm_user:86FkF5vJ_qKYgO6Myj0eQ4Dtm3Dyb1ge@postgres:5432/crm_db
- Redis: redis://default:6VJ7pp8afXXZMnx0JztWFk-OYCLwJfX4@redis:6379/0 - Redis: redis://default:6VJ7pp8afXXZMnx0JztWFk-OYCLwJfX4@redis:6379/0
- SECRET_KEY: DoYnyh_UnvnYphX-qryiaIpQhm8JB39m_xkat9cNmrGpyKSSZvW9jF1tusIUSP5g - SECRET_KEY: DoYnyh_UnvnYphX-qryiaIpQhm8JB39m_xkat9cNmrGpyKSSZvW9jF1tusIUSP5g
- MAIL_ENCRYPTION_KEY: test-mail-encryption-key (AES-256 Fernet Key für Mail-Passwort-Verschlüsselung, in Coolify als Environment Variable setzen)
## Coolify Resources ## Coolify Resources
- Project UUID: mzu7fvhtad82ujgmbsmyvxzm - Project UUID: mzu7fvhtad82ujgmbsmyvxzm