Убираем жёстко прописанные секреты

docker/.env.example

@@ -0,0 +1,4 @@
+# .env.example — закоммитьте этот файл, а реальный .env держите в .gitignore
+RELEASE_COOKIE=ваш-очень-длинный-секретный-куки
+GRAFANA_ADMIN_PASSWORD=сложный-уникальный-пароль
+JWT_SECRET=суперсекрет

docker/docker-compose.yml

@@ -16,7 +16,8 @@ services:
       - ADMIN_HTTP_PORT=8445
       - ADMIN_WS_PORT=8446
       - MNESIA_DIR=/app/data
-      - RELEASE_COOKIE=eventhub_cookie
+      - RELEASE_COOKIE=${RELEASE_COOKIE}
+      - JWT_SECRET=${JWT_SECRET}
     volumes:
       - eventhub-node1-data:/app/data
     networks:
@@ -40,7 +41,8 @@ services:
       - ADMIN_HTTP_PORT=8445
       - ADMIN_WS_PORT=8446
       - MNESIA_DIR=/app/data
-      - RELEASE_COOKIE=eventhub_cookie
+      - RELEASE_COOKIE=${RELEASE_COOKIE}
+      - JWT_SECRET=${JWT_SECRET}
       - JOIN_NODES=eventhub-node1@eventhub-node1
     volumes:
       - eventhub-node2-data:/app/data
@@ -67,7 +69,8 @@ services:
       - ADMIN_HTTP_PORT=8445
       - ADMIN_WS_PORT=8446
       - MNESIA_DIR=/app/data
-      - RELEASE_COOKIE=eventhub_cookie
+      - RELEASE_COOKIE=${RELEASE_COOKIE}
+      - JWT_SECRET=${JWT_SECRET}
       - JOIN_NODES=eventhub-node1@eventhub-node1
     volumes:
       - eventhub-node3-data:/app/data
@@ -85,7 +88,7 @@ services:
     ports:
       - "4000:4000"
     environment:
-      - RELEASE_COOKIE=eventhub_cookie
+      - RELEASE_COOKIE=${RELEASE_COOKIE}
     networks:
       - eventhub-net
     restart: unless-stopped
@@ -114,7 +117,7 @@ services:
       - "3000:3000"
     environment:
       - GF_SECURITY_ADMIN_USER=admin
-      - GF_SECURITY_ADMIN_PASSWORD=zxs45gvHB
+      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD}
     volumes:
       - grafana-data:/var/lib/grafana
       - ./grafana/provisioning:/etc/grafana/provisioning