rotate-secret.sh 639 B

1234567891011121314151617181920212223242526272829
  1. #!/bin/bash
  2. # 检查文件是否存在
  3. if [ ! -f .env.production.docker ]; then
  4. echo "Error: .env.production.docker not found"
  5. exit 1
  6. fi
  7. # 备份当前环境文件
  8. cp .env.production.docker .env.production.docker.backup
  9. # 生成新密钥
  10. NEW_JWT_SECRET=$(openssl rand -base64 64)
  11. # 创建新的环境文件
  12. cat > .env.production.docker.new << EOL
  13. NODE_ENV=production
  14. MONGODB_URI=mongodb://mongodb:27017/mydatabase
  15. JWT_SECRET=${NEW_JWT_SECRET}
  16. EOL
  17. # 替换旧文件
  18. mv .env.production.docker.new .env.production.docker
  19. # 设置适当的权限
  20. chmod 600 .env.production.docker
  21. echo "JWT_SECRET has been rotated successfully"