db user restrict access to container

This commit is contained in:
2024-08-06 09:01:04 -07:00
parent 2ba3fe0a7e
commit bd5b04eeae
5 changed files with 43 additions and 6 deletions

16
other/dbbu.sh Executable file
View File

@ -0,0 +1,16 @@
#!/bin/bash
# copy do db mount, use as helper
if [[ -z $1 ]] ; then
echo "dbbu.sh <gitea|flask> <rootpass>"
exit 0
fi
if [[ $1 == "gitea" ]] ; then
mariadb-dump -uroot -p$2 gitea > gitea_bu_$(date +%s).sql
fi
if [[ $1 == "flask" ]] ; then
mariadb-dump -uroot -p$2 flask > flask_bu_$(date +%s).sql
fi

View File

@ -19,10 +19,10 @@ echo "Changing app db passwords in 5 seconds..."
sleep 6
# Flask
docker-compose exec db mariadb --database=mysql -uroot -p$DOTENV_MYSQL_ROOT_PASSWORD_OLD -e "ALTER USER 'flasku' IDENTIFIED BY '"$DOTENV_MYSQL_FLASK_PASSWORD"';"
docker-compose exec db mariadb --database=mysql -uroot -p$DOTENV_MYSQL_ROOT_PASSWORD_OLD -e "ALTER USER 'flasku'@'backend.backnet' IDENTIFIED BY '"$DOTENV_MYSQL_FLASK_PASSWORD"';"
# Gitea
docker-compose exec db mariadb --database=mysql -uroot -p$DOTENV_MYSQL_ROOT_PASSWORD_OLD -e "ALTER USER 'gitea' IDENTIFIED BY '"$DOTENV_MYSQL_GITEA_PASSWORD"';"
docker-compose exec db mariadb --database=mysql -uroot -p$DOTENV_MYSQL_ROOT_PASSWORD_OLD -e "ALTER USER 'gitea'@'gitea.backnet' IDENTIFIED BY '"$DOTENV_MYSQL_GITEA_PASSWORD"';"
docker-compose exec db mariadb --database=mysql -uroot -p$DOTENV_MYSQL_ROOT_PASSWORD_OLD -e "FLUSH PRIVILEGES;"