From 8a5bc7873a906a033b46b22922dafc847bc7cfdb Mon Sep 17 00:00:00 2001
From: Thomas Peetz <thomas.peetz@cimt-ag.de>
Date: Wed, 16 Sep 2026 16:57:42 +0200
Subject: [PATCH] change usage of secret

---
 service/container/kontor-postgres.service | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/service/container/kontor-postgres.service b/service/container/kontor-postgres.service
index d5179b2..3e8b099 100644
--- a/service/container/kontor-postgres.service
+++ b/service/container/kontor-postgres.service
@@ -24,9 +24,10 @@ ExecStart=/usr/bin/podman run \
 	-d \
 	--replace \
 	--name postgres \
-	-e POSTGRES_PASSWORD=kontor \
+    --secret source=pg_password,type=env,target=POSTGRES_PASSWORD \
 	-e POSTGRES_DB=kontor \
 	-e POSTGRES_USER=kontor \
+    -e POSTGRES_HOST_AUTH_METHOD=scram-sha-256 \
 	-v kontor-db:/var/lib/postgresql/data \
     --health-cmd="pg_isready -U kontor || exit 1" \
 	--health-interval=1s \