fix: inject secrets from Consul KV via Nomad template (not baked in image)

2026-05-23 00:58:44 +02:00
parent ad43e80f95
commit 4305c1bc13
2 changed files with 12 additions and 12 deletions
--- a/moneycapp-tink-demo.nomad
+++ b/moneycapp-tink-demo.nomad
@@ -34,6 +34,18 @@ job "tink-demo" {
        ports      = ["http"]
      }

+      template {
+        data = <<EOH
+TINK_CLIENT_ID="{{ key "tink-demo/TINK_CLIENT_ID" }}"
+TINK_CLIENT_SECRET="{{ key "tink-demo/TINK_CLIENT_SECRET" }}"
+TINK_REDIRECT_URI="https://tink-demo.i80.dk/callback"
+APP_BASE_URL="https://tink-demo.i80.dk"
+DEMO_MODE="false"
+EOH
+        destination = "secrets/app.env"
+        env         = true
+      }
+
      resources {
        cpu    = 256
        memory = 256