jank but working

.env.sample

@@ -7,7 +7,8 @@ DOMAIN=cal.example.com
 LETS_ENCRYPT_ENV=production
 
 SECRET_DB_PASSWORD_VERSION=v1
-
+SECRET_NEXTAUTH_SECRET_VERSION=v1
+SECRET_CALENDSO_ENCRYPTION_KEY_VERSION=v1
 ## Uncomment this to enable collection of anonymous usage data
 #NEXT_PUBLIC_TELEMETRY_KEY=js.2pvs2bbpqq1zxna97wcml.oi2jzirnbj1ev4tc57c5r
 

abra.sh

@@ -1 +1 @@
-export ENTRYPOINT_CONF_VERSION=v6
+export ENTRYPOINT_CONF_VERSION=v8

compose.yml

@@ -9,12 +9,16 @@ services:
       - backend
     secrets:
       - db_password
+      - nextauth_secret
+      - calendso_encryption_key
     environment:
       - POSTGRES_USER=calendso
       - POSTGRES_PASSWORD_FILE=/run/secrets/db_password
       - POSTGRES_DB=calendso
       - POSTGRES_HOST=db
       - "NEXT_PUBLIC_WEBAPP_URL=https://${DOMAIN}"
+      - NEXTAUTH_SECRET_FILE=/run/secrets/nextauth_secret
+      - CALENDSO_ENCRYPTION_KEY_FILE=/run/secrets/calendso_encryption_key
       - NEXT_PUBLIC_TELEMETRY_KEY
       - MS_GRAPH_CLIENT_ID
       - ZOOM_CLIENT_ID
@@ -84,6 +88,9 @@ secrets:
   nextauth_secret:
     external: true
     name: ${STACK_NAME}_nextauth_secret_${SECRET_NEXTAUTH_SECRET_VERSION}
+  calendso_encryption_key:
+    external: true
+    name: ${STACK_NAME}_calendso_encryption_key_${SECRET_CALENDSO_ENCRYPTION_KEY_VERSION}
 
 configs:
   entrypoint_conf:

entrypoint.sh

@@ -31,6 +31,7 @@ load_vars() {
 	file_env "ZOOM_CLIENT_SECRET"
 	file_env "EMAIL_SERVER_PASSWORD"
 	file_env "NEXTAUTH_SECRET"
+	file_env "CALENDSO_ENCRYPTION_KEY"
 
 	export "DATABASE_URL=postgresql://$POSTGRES_USER:$POSTGRES_PASSWORD@$POSTGRES_HOST:5432/$POSTGRES_DB"
 }