fix: custom dockerfile

Author: NERLOE

docker/Dockerfile

@@ -75,7 +75,7 @@ RUN --mount=type=secret,id=sentry_auth_token \
 
 # Runner
 FROM ${NODE_IMAGE} AS runner
-RUN apt-get update && apt-get install -y openssl netcat-openbsd ca-certificates
+RUN apt-get update && apt-get install -y openssl netcat-openbsd ca-certificates gettext-base
 WORKDIR /triggerdotdev
 ENV NODE_ENV=production
 

docker/scripts/entrypoint.sh

@@ -18,16 +18,19 @@ if [ -n "$CLICKHOUSE_URL" ] && [ "$SKIP_CLICKHOUSE_MIGRATIONS" != "1" ]; then
   echo "Running ClickHouse migrations..."
   export GOOSE_DRIVER=clickhouse
 
+  # Expand any embedded environment variables (e.g., ${CLICKHOUSE_PASSWORD} when using existingSecret)
+  EXPANDED_CLICKHOUSE_URL=$(echo "$CLICKHOUSE_URL" | envsubst)
+  
   # Ensure secure=true is in the connection string
-  if echo "$CLICKHOUSE_URL" | grep -q "secure="; then
+  if echo "$EXPANDED_CLICKHOUSE_URL" | grep -q "secure="; then
     # secure parameter already exists, use as is
-    export GOOSE_DBSTRING="$CLICKHOUSE_URL"
-  elif echo "$CLICKHOUSE_URL" | grep -q "?"; then
+    export GOOSE_DBSTRING="$EXPANDED_CLICKHOUSE_URL"
+  elif echo "$EXPANDED_CLICKHOUSE_URL" | grep -q "?"; then
     # URL has query parameters, append secure=true
-    export GOOSE_DBSTRING="${CLICKHOUSE_URL}&secure=true"
+    export GOOSE_DBSTRING="${EXPANDED_CLICKHOUSE_URL}&secure=true"
   else
     # URL has no query parameters, add secure=true
-    export GOOSE_DBSTRING="${CLICKHOUSE_URL}?secure=true"
+    export GOOSE_DBSTRING="${EXPANDED_CLICKHOUSE_URL}?secure=true"
   fi
 
   export GOOSE_MIGRATION_DIR=/triggerdotdev/internal-packages/clickhouse/schema
@@ -45,6 +48,16 @@ cp node_modules/@prisma/engines/*.node apps/webapp/prisma/
 
 cd /triggerdotdev/apps/webapp
 
+# Expand any embedded environment variables in ClickHouse URLs (e.g., ${CLICKHOUSE_PASSWORD} when using existingSecret)
+if [ -n "$CLICKHOUSE_URL" ]; then
+  export CLICKHOUSE_URL=$(echo "$CLICKHOUSE_URL" | envsubst)
+fi
+if [ -n "$RUN_REPLICATION_CLICKHOUSE_URL" ]; then
+  export RUN_REPLICATION_CLICKHOUSE_URL=$(echo "$RUN_REPLICATION_CLICKHOUSE_URL" | envsubst)
+fi
+if [ -n "$EVENTS_CLICKHOUSE_URL" ]; then
+  export EVENTS_CLICKHOUSE_URL=$(echo "$EVENTS_CLICKHOUSE_URL" | envsubst)
+fi
 
 # Decide how much old-space memory Node should get.
 # Use $NODE_MAX_OLD_SPACE_SIZE if it’s set; otherwise fall back to 8192.