passwords and secret within docker - options?

[shuther]

While I set a complex password for the docker zipline, I was able to see an error with docker compose logs:
runtipi-reverse-proxy | time="2024-04-23T12:00:52Z" level=error msg="Skip container zipline-zipline: strconv.ParseBool: parsing \"\": invalid syntax" providerName=docker
Further analysis of the docker compose file for zipline pointed me to the line below:
- CORE_DATABASE_URL=postgres://tipi:${ZIPLINE_DB_PASSWORD}@zipline-db/zipline
So if the password contains special character (such as @), this will generate an error.
While not every container supports it, we could make use of secrets (i.e. docker secrets) to manage passwords and we should avoid coding the full DB URL. Instead we could push the different element in multiple lines. See an example here.

Another option could be to inform the user when they specify a password to avoid specific characters.

What do you think?