From 7b7de905f939919884dad7c21d19e15a2a36b4b6 Mon Sep 17 00:00:00 2001
From: Liosha84 <Liosha84@gmail.com>
Date: Sat, 7 Nov 2026 15:27:23 +0100
Subject: [PATCH] =?UTF-8?q?secrets-init:=20SERVICE=5FTOKEN=20=D1=87=D0=B8?=
 =?UTF-8?q?=D1=82=D0=B0=D0=B5=D0=BC=D1=8B=D0=B9=20=D0=B4=D0=BB=D1=8F=20?=
 =?UTF-8?q?=D1=81=D0=B5=D1=80=D0=B2=D0=B5=D1=80=D0=B0=20(=D0=BA=D0=B0?=
 =?UTF-8?q?=D0=BA=20DB=5FPASSWORD,=20JWT=5FSECRET)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Без этого после #26 сервер не стартует: AccessDeniedException /run/mail-secrets/SERVICE_TOKEN
(на prod поправлено руками chmod 644 в томе 2026-11-07).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 docker-compose.image.yml     | 2 +-
 docker-compose.jambotron.yml | 2 +-
 docker-compose.public.yml    | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docker-compose.image.yml b/docker-compose.image.yml
index 3730100..07ddb6b 100644
--- a/docker-compose.image.yml
+++ b/docker-compose.image.yml
@@ -23,7 +23,7 @@ services:
           [ -s /secrets/$$name ] || head -c 48 /dev/urandom | base64 | tr -dc 'A-Za-z0-9' > /secrets/$$name
         done
         # postgres reads it as uid 70, the app as uid 10001 — readable inside these containers only
-        chmod 644 /secrets/DB_PASSWORD /secrets/JWT_SECRET
+        chmod 644 /secrets/DB_PASSWORD /secrets/JWT_SECRET /secrets/SERVICE_TOKEN
     volumes:
       - secrets:/secrets
 
diff --git a/docker-compose.jambotron.yml b/docker-compose.jambotron.yml
index d61c445..e8ff4cb 100644
--- a/docker-compose.jambotron.yml
+++ b/docker-compose.jambotron.yml
@@ -20,7 +20,7 @@ services:
           [ -s /secrets/$$name ] || head -c 48 /dev/urandom | base64 | tr -dc 'A-Za-z0-9' > /secrets/$$name
         done
         # postgres reads it as uid 70, the app as uid 10001 — readable inside these containers only
-        chmod 644 /secrets/DB_PASSWORD /secrets/JWT_SECRET
+        chmod 644 /secrets/DB_PASSWORD /secrets/JWT_SECRET /secrets/SERVICE_TOKEN
     volumes:
       - secrets:/secrets
 
diff --git a/docker-compose.public.yml b/docker-compose.public.yml
index d479088..7b693f1 100644
--- a/docker-compose.public.yml
+++ b/docker-compose.public.yml
@@ -38,7 +38,7 @@ services:
         for name in DB_PASSWORD JWT_SECRET SERVICE_TOKEN; do
           [ -s /secrets/$$name ] || head -c 48 /dev/urandom | base64 | tr -dc 'A-Za-z0-9' > /secrets/$$name
         done
-        chmod 644 /secrets/DB_PASSWORD /secrets/JWT_SECRET
+        chmod 644 /secrets/DB_PASSWORD /secrets/JWT_SECRET /secrets/SERVICE_TOKEN
     volumes:
       - secrets:/secrets
 
-- 
2.54.0