Use secrets instead of copy

Shilohimage

@@ -99,8 +99,9 @@ RUN apt-get update \
 
 USER frappe
 
-COPY ./.ssh /home/frappe/.ssh
-RUN echo "StrictHostKeyChecking no" > ~/.ssh/config
+RUN mkdir -p /home/frappe/.ssh && ln -s /run/secrets/user_ssh_key /home/frappe/.ssh/id_ed25519
+RUN chown -R frappe:frappe /home/frappe/.ssh
+RUN echo "Host *.trabe.io\n\tStrictHostKeyChecking no\n" >> /home/frappe/.ssh/config
 
 ARG FRAPPE_BRANCH=version-15
 ARG FRAPPE_PATH=https://github.com/frappe/frappe

compose.yaml

@@ -40,6 +40,8 @@ services:
       REDIS_QUEUE: ${REDIS_QUEUE}
       SOCKETIO_PORT: 9000
     depends_on: {}
+    secrets:
+      - user_ssh_key
 
   backend:
     <<: *backend_defaults
@@ -86,3 +88,7 @@ services:
 # ERPNext requires local assets access (Frappe does not)
 volumes:
   sites:
+
+secrets:
+  user_ssh_key:
+    file: ~/.ssh/brothertonerpprod_ed25519