Move database password to file

Signed-off-by: alfred richardsn <rchrdsn@protonmail.ch>

.env.example

@@ -7,7 +7,7 @@ WEBHOOK_PATH=/tellerbot/webhook
 DATABASE_NAME=tellerbot
 DATABASE_HOST=database
 DATABASE_USERNAME=tellerbot
-DATABASE_PASSWORD=
+DATABASE_PASSWORD_FILENAME=/run/secrets/dbpassword
 
 # Logging
 LOGGER_LEVEL=INFO

docker-compose.yml

@@ -9,6 +9,7 @@ services:
       - .env
     restart: on-failure
     volumes:
+      - ${DATABASE_PASSWORD_FILENAME}:${DATABASE_PASSWORD_FILENAME}:ro
       - ${TOKEN_FILENAME}:${TOKEN_FILENAME}:ro
       - ${WIF_FILENAME}:${WIF_FILENAME}:ro
     ports:
@@ -19,9 +20,10 @@ services:
     container_name: ${DATABASE_HOST}
     environment:
       - MONGO_INITDB_ROOT_USERNAME=${DATABASE_USERNAME}
-      - MONGO_INITDB_ROOT_PASSWORD=${DATABASE_PASSWORD}
+      - MONGO_INITDB_ROOT_PASSWORD_FILE=${DATABASE_PASSWORD_FILENAME}
     command: mongod --quiet
     ports:
       - 27017
     volumes:
+      - ${DATABASE_PASSWORD_FILENAME}:${DATABASE_PASSWORD_FILENAME}:ro
       - ~/data/db:/data/db

src/config.py

@@ -40,7 +40,7 @@ def getenv_bool(key, default=None):
 DATABASE_NAME = getenv("DATABASE_NAME", "tellerbot")
 DATABASE_HOST = getenv("DATABASE_HOST", "127.0.0.1")
 DATABASE_USERNAME = getenv("DATABASE_USERNAME")
-DATABASE_PASSWORD = getenv("DATABASE_PASSWORD")
+DATABASE_PASSWORD_FILENAME = getenv("DATABASE_PASSWORD_FILENAME")
 
 LOGGER_LEVEL = getenv("LOGGER_LEVEL")
 LOG_FILENAME = getenv("LOG_FILENAME")

src/database.py

@@ -22,11 +22,15 @@
 from src import config
 
 
-client = AsyncIOMotorClient(
-    config.DATABASE_HOST,
-    username=config.DATABASE_USERNAME,
-    password=config.DATABASE_PASSWORD,
-)
+if config.DATABASE_USERNAME and config.DATABASE_PASSWORD_FILENAME:
+    with open(config.DATABASE_PASSWORD_FILENAME, "r") as password_file:
+        client = AsyncIOMotorClient(
+            config.DATABASE_HOST,
+            username=config.DATABASE_USERNAME,
+            password=password_file.read(),
+        )
+else:
+    client = AsyncIOMotorClient(config.DATABASE_HOST)
 database = client[config.DATABASE_NAME]
 
 STATE_KEY = "state"