From 0f575192912d14b061b27dfc0dde4277a37e2e30 Mon Sep 17 00:00:00 2001
From: Chris Kruining <c.kruining@4dotnet.nl>
Date: Wed, 5 Mar 2025 16:04:01 +0100
Subject: [PATCH] move the session secret to GH secret

---
 .github/workflows/app.yml | 1 +
 Dockerfile                | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/app.yml b/.github/workflows/app.yml
index 9e94c86..8fc766a 100644
--- a/.github/workflows/app.yml
+++ b/.github/workflows/app.yml
@@ -49,6 +49,7 @@ jobs:
 
       - name: Build container images
         run: |
+          echo 'SESSION_SECRET=${{ secrets.SESSION_PASSWORD }}' > .env
           docker build . --file Dockerfile --tag ${{ secrets.ACR_LOGIN_SERVER }}/$IMAGE_NAME:${{needs.versionize.outputs.semver}}
           docker build . --file Dockerfile --tag ${{ secrets.ACR_LOGIN_SERVER }}/$IMAGE_NAME:latest
 
diff --git a/Dockerfile b/Dockerfile
index dbc4245..1395753 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,7 +13,7 @@ RUN cd /temp/prod && bun install --frozen-lockfile --production
 FROM base AS prerelease
 COPY --from=install /temp/dev/node_modules node_modules
 COPY . .
-RUN echo "SESSION_SECRET=$(head -c 64 /dev/random | base64)" > .env
+# RUN echo "SESSION_SECRET=$(head -c 64 /dev/random | base64)" > .env
 
 ENV NODE_ENV=production
 ENV SERVER_PRESET=bun