Use Podman Secret for Storing the Database Password

Podman secrets can be used to store the database password securely instead of exposing it in plain text within the container files. To use them, simply replace the Environment directive containing the database password with the respective Secret directive in immich-database.container:

- Environment=POSTGRES_PASSWORD=${DB_PASSWORD}
+ Secret=immich_db_password,type=env,target=POSTGRES_PASSWORD

And in immich-server.container:

- Environment=DB_PASSWORD=${DB_PASSWORD}
+ Secret=immich_db_password,type=env,target=DB_PASSWORD

The secret can be created securely in the terminal using the following command:

systemd-ask-password -n "Enter Immich DB Password:" | podman secret create immich_db_password -

Here are some resources for Podman secrets that you might find useful:

• Using Secrets with Enviroments in Quadlets
• Podman secrets - How the hell does it work?