Merge pull request #57 from Azure/copilot/fix-56

Replace hardcoded PostgreSQL password with secure user prompts

Author: sinedied

.gitignore

@@ -49,4 +49,8 @@ nb-configuration.xml
 create.sql
 drop.sql
 
+# Environment files that may contain secrets
+.env
+.env.*
+
 *.dylib

scripts/infra/azure.cmd

@@ -13,7 +13,12 @@ set "REGISTRY=crjavaruntimes${UNIQUE_IDENTIFIER}"
 set "IMAGES_TAG=1.0"
 
 set "POSTGRES_DB_ADMIN=javaruntimesadmin"
-set "POSTGRES_DB_PWD=java-runtimes-p#ssw0rd-12046"
+
+REM Prompt for PostgreSQL password if not already set
+if not defined POSTGRES_DB_PWD (
+    echo Please enter the PostgreSQL database password:
+    set /p "POSTGRES_DB_PWD="
+)
 set "POSTGRES_DB_VERSION=14"
 set "POSTGRES_SKU=Standard_B1ms"
 set "POSTGRES_TIER=Burstable"

scripts/infra/azure.sh

@@ -114,7 +114,13 @@ createInfrastructure() {
   IMAGES_TAG="1.0"
 
   POSTGRES_DB_ADMIN="javaruntimesadmin"
-  POSTGRES_DB_PWD="java-runtimes-p#ssw0rd-12046"
+  
+  # Prompt for PostgreSQL password if not already set
+  if [ -z "$POSTGRES_DB_PWD" ]; then
+    echo "Please enter the PostgreSQL database password:"
+    read -s POSTGRES_DB_PWD
+    echo  # Print a new line after the hidden input
+  fi
   POSTGRES_DB_VERSION="14"
   POSTGRES_SKU="Standard_B1ms"
   POSTGRES_TIER="Burstable"

scripts/infra/env.sh

@@ -26,7 +26,14 @@ export REGISTRY="crjavaruntimes${UNIQUE_IDENTIFIER}"
 export IMAGES_TAG="1.0"
 
 export POSTGRES_DB_ADMIN="javaruntimesadmin"
-export POSTGRES_DB_PWD="java-runtimes-p#ssw0rd-12046"
+
+# Prompt for PostgreSQL password if not already set
+if [ -z "$POSTGRES_DB_PWD" ]; then
+  echo "Please enter the PostgreSQL database password:"
+  read -s POSTGRES_DB_PWD
+  echo  # Print a new line after the hidden input
+fi
+export POSTGRES_DB_PWD
 export POSTGRES_DB_VERSION="14"
 export POSTGRES_SKU="Standard_B1ms"
 export POSTGRES_TIER="Burstable"