From e8becef76d4871be24e1e477ea1f8eabca38a102 Mon Sep 17 00:00:00 2001
From: Dan Tenenbaum <dtenenba@fhcrc.org>
Date: Wed, 20 Oct 2021 11:33:23 -0700
Subject: [PATCH] allow HAPROXY_PASSWORD to be a path to a Docker secret -
 resolve if so

---
 assets/scripts/swarm.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/assets/scripts/swarm.py b/assets/scripts/swarm.py
index c7741ec..e505336 100644
--- a/assets/scripts/swarm.py
+++ b/assets/scripts/swarm.py
@@ -10,9 +10,13 @@ result = {
 }
 
 if os.getenv("HAPROXY_PASSWORD"):
+    password = os.getenv("HAPROXY_PASSWORD")
+    if password.startswith("/run/secrets/"): # support docker secrets
+        with open(password) as passfh:
+            password = passfh.read().strip()
     result["stats"] = {
         "username": os.getenv("HAPROXY_USERNAME") if os.getenv("HAPROXY_USERNAME") else "admin",
-        "password": os.getenv("HAPROXY_PASSWORD"),
+        "password": password,
         "port": os.getenv("HAPROXY_STATS_PORT") if os.getenv("HAPROXY_STATS_PORT") else "1936",
     }