torsten/yourpart3
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(update-backend): adjust file permissions and handle environment variables safely
All checks were successful
Deploy to production / deploy (push) Successful in 4m25s
Details

Browse Source 
- Updated the permission settings for the environment file to 640, ensuring it is readable only by the owner and the deploy group.
- Modified the sequelize configuration to safely handle missing environment variables, converting them to strings or setting them to undefined to prevent runtime errors.
[force-deploy]
This commit is contained in:
Torsten Schulz (local)
2026-04-17 13:53:13 +02:00
parent 1b9d9664b2
commit b3346d4cac
2 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
backend/config/sequelize-cli.cjs
View File

@@ -14,10 +14,11 @@ if (process.env.DB_SSL === '1' || process.env.PGSSLMODE === 'require') {
: true; : true;
} }
// pg/SCRAM: password muss ein String sein; bei fehlender .env sonst undefined-Fallen vermeiden
const shared = { const shared = {
username: process.env.DB_USER, username: process.env.DB_USER != null ? String(process.env.DB_USER) : undefined,
password: process.env.DB_PASS || '', password: process.env.DB_PASS != null ? String(process.env.DB_PASS) : '',
database: process.env.DB_NAME, database: process.env.DB_NAME != null ? String(process.env.DB_NAME) : undefined,
host: process.env.DB_HOST || '127.0.0.1', host: process.env.DB_HOST || '127.0.0.1',
port: Number.parseInt(process.env.DB_PORT || '5432', 10), port: Number.parseInt(process.env.DB_PORT || '5432', 10),
dialect: 'postgres', dialect: 'postgres',

7
update-backend.sh
View File

@@ -33,11 +33,14 @@ echo "Quelle: $SOURCE_ENV"
echo "Ziel: $TARGET_ENV" echo "Ziel: $TARGET_ENV"
sudo -n ls -l "$SOURCE_ENV" sudo -n ls -l "$SOURCE_ENV"
sudo -n install -m 600 -o yourpart -g yourpart "$SOURCE_ENV" "$TARGET_ENV" # 640, Owner yourpart, Gruppe = Deploy-User: npm/db:migrate muss .env lesen (dotenv),
# ohne die Datei weltlesbar zu machen.
DEPLOY_GROUP="$(id -gn)"
sudo -n install -m 640 -o yourpart -g "$DEPLOY_GROUP" "$SOURCE_ENV" "$TARGET_ENV"
echo "Prüfe kopierte Datei..." echo "Prüfe kopierte Datei..."
ls -l "$TARGET_ENV" ls -l "$TARGET_ENV"
sudo -n head -n 1 "$TARGET_ENV" >/dev/null head -n 1 "$TARGET_ENV" >/dev/null
echo "✓ .env-Datei wurde übernommen" echo "✓ .env-Datei wurde übernommen"