Add vault

docker/build.dockerfile

@@ -10,12 +10,15 @@ RUN cargo build --release --bin book_bot
 FROM debian:bullseye-slim
 
 RUN apt-get update \
-    && apt-get install -y openssl ca-certificates \
+    && apt-get install -y openssl ca-certificates curl jq \
     && rm -rf /var/lib/apt/lists/*
 
 RUN update-ca-certificates
 
+COPY ./scripts/*.sh /
+RUN chmod +x /*.sh
+
 WORKDIR /app
 
 COPY --from=builder /app/target/release/book_bot /usr/local/bin
-ENTRYPOINT ["/usr/local/bin/book_bot"]
+ENTRYPOINT ["/start.sh"]

scripts/env.sh

@@ -0,0 +1,7 @@
+#! /usr/bin/env sh
+
+response=`curl -X 'GET' "https://$VAULT_HOST/v1/$VAULT_SECRET_PATH" -s \
+  -H 'accept: application/json' \
+  -H "X-Vault-Token: $VAULT_TOKEN"`
+
+echo "$(echo "$response" | jq -r '.data.data | to_entries | map("\(.key)=\(.value)") | .[]')"

scripts/start.sh

@@ -0,0 +1,5 @@
+#! /usr/bin/env sh
+
+export $(/env.sh)
+
+exec /usr/local/bin/book_bot