windmill: secret protection, socket-only postgres, volume rename/backup

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/8bfb1fa8-7878-434e-ab4d-1034067e5ad0

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-04-28 11:30:53 +00:00
committed by GitHub
parent b205e46976
commit 56afde115d
4 changed files with 24 additions and 16 deletions

View File

@@ -178,7 +178,8 @@
"FULLTEXTSEARCH_PASSWORD",
"IMAGINARY_SECRET",
"WHITEBOARD_SECRET",
"HP_SHARED_KEY"
"HP_SHARED_KEY",
"WINDMILL_SECRET"
],
"volumes": [
{
@@ -268,7 +269,8 @@
"HARP_ENABLED=%HARP_ENABLED%",
"HP_SHARED_KEY=%HP_SHARED_KEY%",
"WINDMILL_ENABLED=%WINDMILL_ENABLED%",
"WINDMILL_HOST=nextcloud-aio-windmill"
"WINDMILL_HOST=nextcloud-aio-windmill",
"WINDMILL_SECRET=%WINDMILL_SECRET%"
],
"stop_grace_period": 600,
"restart": "unless-stopped",
@@ -980,7 +982,11 @@
"NUM_WORKERS=1",
"MODE=standalone",
"DISABLE_NSJAIL=true",
"DATABASE_URL=postgresql://windmill@localhost/windmill?host=/var/run/postgresql"
"DATABASE_URL=postgresql://windmill@localhost/windmill?host=/var/run/postgresql",
"SUPERADMIN_SECRET=%WINDMILL_SECRET%"
],
"secrets": [
"WINDMILL_SECRET"
],
"volumes": [
{
@@ -994,13 +1000,14 @@
"writeable": true
},
{
"source": "nextcloud_aio_windmill",
"source": "nextcloud_aio_windmill_cache",
"destination": "/tmp/windmill/cache",
"writeable": true
}
],
"backup_volumes": [
"nextcloud_aio_windmill_db"
"nextcloud_aio_windmill_db",
"nextcloud_aio_windmill_dump"
],
"restart": "unless-stopped",
"stop_grace_period": 1800,