Skip to content

build: use Docker secrets for GIT_ACCESS_TOKEN#855

Draft
lajczi wants to merge 1 commit into
Hack4Krak:masterfrom
lajczi:issue/854
Draft

build: use Docker secrets for GIT_ACCESS_TOKEN#855
lajczi wants to merge 1 commit into
Hack4Krak:masterfrom
lajczi:issue/854

Conversation

@lajczi
Copy link
Copy Markdown
Collaborator

@lajczi lajczi commented Apr 19, 2026

Closes #854

@lajczi lajczi requested review from a team and Norbiros as code owners April 19, 2026 10:59
@hack4krak-frontend-dokploy
Copy link
Copy Markdown

hack4krak-frontend-dokploy Bot commented Apr 19, 2026

Dokploy Preview Deployment

Name Status Preview Updated (UTC)
Frontend ❌ Failed Preview URL 2026-04-19T10:59:45.652Z

Comment thread backend/Dockerfile Outdated
Comment thread backend/Dockerfile Outdated
Comment thread docker-compose.yml Outdated
Copy link
Copy Markdown
Member

@Norbiros Norbiros left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am not sure if the fix for this issue will be that simple. Remember that we are deploying it in dokploy, and we need to be sure that it is possible.

Comment thread backend/Dockerfile Outdated
Signed-off-by: lajczi <lajczi@disroot.org>
Comment thread backend/Dockerfile
ARG GIT_ACCESS_TOKEN=token
ARG BRANCH=master
# Pass --build-arg CACHEBUST=$(date +%s) to invalidate cache when tasks repo updates
ARG CACHEBUST=0
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I stated that it needs to work with dokploy and there is no way to pass random parameter.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can I just remove CACHEBUST arg? In Dokploy you can use the "Force Rebuild" button which clears docker's build cache achieving the same effect

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

otherwise I can't really use secrets because it just won't work with cache

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We don't want to force rebuild of the entire application every time.

@lajczi lajczi closed this Apr 19, 2026
@lajczi lajczi reopened this Apr 19, 2026
@lajczi lajczi marked this pull request as draft April 20, 2026 18:12
@Norbiros
Copy link
Copy Markdown
Member

This issue is really complex and probably requires complete rewrite of pulling & providing tasks for the core web server. If you want you can look into that, but first please, discuss it with me.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Enhancement]: Use Docker Secrets instead of args for providing tasks git url

3 participants