Перенесены секреты из .env в SM

codebase/backend/bitrix-sync/Dockerfile

@@ -6,7 +6,9 @@ COPY app ./app
 COPY alembic ./alembic
 COPY alembic.ini pyproject.toml ./
 RUN pip install --no-cache-dir .
+COPY --chmod=0555 container-entrypoint.sh /usr/local/bin/han-container-entrypoint
 USER app
 EXPOSE 8080
 HEALTHCHECK --interval=30s --timeout=3s CMD python -c "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/health/live', timeout=2)"
+ENTRYPOINT ["/usr/local/bin/han-container-entrypoint"]
 CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8080"]

codebase/backend/bitrix-sync/container-entrypoint.sh

@@ -0,0 +1,23 @@
+#!/bin/sh
+set -eu
+
+for name in ${HAN_SECRET_VARS:-}; do
+  case "$name" in
+    ""|[0-9]*|*[!A-Z0-9_]*)
+      echo "container secrets: invalid variable name" >&2
+      exit 64
+      ;;
+    *) ;;
+  esac
+  eval "file=\${${name}_FILE:-}"
+  if [ -z "$file" ] || [ ! -r "$file" ]; then
+    echo "container secrets: missing file for $name" >&2
+    exit 66
+  fi
+  value=$(cat "$file")
+  export "$name=$value"
+  unset "${name}_FILE"
+done
+
+unset HAN_SECRET_VARS
+exec "$@"