Refuse a throwaway plugin storage secret in bootstrap, before any role is created

2026-08-18 23:24:34 +02:00
parent c7013be2f0
commit d2211cf75a
6 changed files with 25 additions and 11 deletions
@@ -35,6 +35,7 @@ services:
    # Provisions the plugin databases web connects to above, as the dev superuser.
    environment:
      PLUGIN_DB_ADMIN_URL: postgres://${POSTGRES_USER:-ory}:${POSTGRES_PASSWORD:-ory}@postgres:5432/ory
+      REQUIRE_SECURE_SECRETS: "false" # dev derives from the throwaway, as web does
    volumes:
      - .:/app