move certificates to secrets

docker-compose.yml

@@ -1,4 +1,4 @@
-version: '2'
+version: '3.1'
 
 services:
   web:
@@ -14,3 +14,11 @@ services:
       - .:/home/elixir/app
       - ../app:/home/elixir/tokumei
     command: sh start.sh
+    secrets:
+      - certfile
+      - keyfile
+secrets:
+  certfile:
+    file: ./secrets/certificate.pem
+  keyfile:
+    file: ./secrets/certificate_key.pem

lib/water_cooler/application.ex

@@ -10,7 +10,14 @@ defmodule WaterCooler.Application do
     {:ok, secure_port} = env.secure_port
     {:ok, service_name} = env.service_name
 
-    options = [port: secure_port, certfile: certificate_path, keyfile: certificate_key_path()]
+    options = [port: secure_port, certfile: "/run/secrets/certfile", keyfile: "/run/secrets/keyfile"]
+
+    # # File.ls("/run")
+    # # |> IO.inspect
+    # # File.ls("/run/secrets")
+    # # |> IO.inspect
+    # File.read("/run/secrets/certfile")
+    # # |> IO.inspect
 
     children = [
       # worker(WaterCooler.WWW, [[port: port()]], id: :http),
@@ -22,12 +29,4 @@ defmodule WaterCooler.Application do
     opts = [strategy: :one_for_one, name: WaterCooler.Supervisor]
     Supervisor.start_link(children, opts)
   end
-
-  defp certificate_path() do
-    Application.app_dir(:water_cooler, "priv/localhost/certificate.pem")
-  end
-
-  defp certificate_key_path() do
-    Application.app_dir(:water_cooler, "priv/localhost/certificate_key.pem")
-  end
 end

mix.exs

@@ -3,6 +3,7 @@ defmodule WaterCooler.Mixfile do
 
   def project do
     [
+      # TODO make :www
       app: :water_cooler,
       version: "0.0.1",
       elixir: "~> 1.4",