move db passwords into secrets/

.gitignore

@@ -1,2 +1,3 @@
 *~
 env
+secrets

docker-compose.yml

@@ -26,10 +26,13 @@ services:
     image: mariadb
     container_name: brewblogger-mariadb
     restart: unless-stopped
-#    environment:
-#      - MARIADB_ROOT_PASSWORD=super-secret-password
-#      # set MARIADB_ROOT_PASSWORD for first run only
+    environment:
+      MARIADB_USER: brewblogger
+      MARIADB_DATABASE: brewblogger
+      MARIADB_ROOT_PASSWORD_FILE: /run/secrets/MARIADB_ROOT_PASSWORD
+      MARIADB_PASSWORD_FILE: /run/secrets/BREWBLOGGER_DB_PASSWORD
     volumes:
+      - ./secrets:/run/secrets
       - brewblogger-db:/var/lib/mysql
     networks:
       - brewblogger
@@ -40,7 +43,7 @@ services:
     network_mode: none
     command: [ "tail", "-f", "/dev/null" ]
     labels:
-      caddy: beerandloafing.org
+      caddy: www.beerandloafing.org
       caddy.redir: https://beerandloafing.org{uri}
 
 networks: