feat: ajout changement de mot de passe + bind mounts persistants + credentials en variables d'env

docker-compose.yml

@@ -6,9 +6,9 @@ services:
     environment:
       POSTGRES_DB:       notesfrais
       POSTGRES_USER:     notesfrais
-      POSTGRES_PASSWORD: 9a3dabd70bb1e09f09962a95bdaffbeacdc56eeee029334b
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
     volumes:
-      - pgdata4:/var/lib/postgresql/data
+      - /opt/notesfrais/pgdata:/var/lib/postgresql/data
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U notesfrais -d notesfrais"]
       interval: 5s
@@ -24,19 +24,19 @@ services:
       context: ./backend
       dockerfile: Dockerfile
     environment:
-      NODE_ENV:    production
-      PORT:        3001
-      DATABASE_URL: postgresql://notesfrais:9a3dabd70bb1e09f09962a95bdaffbeacdc56eeee029334b@db:5432/notesfrais
-      JWT_SECRET:  f1bec20689d176182a33b6904a236d9c207322fb5886e6599812bfbc236bd95bff4d1a05edb273a6ccdb6e06004e059241f7937ef91dee08b92fc25f0ea767c1
-      APP_SECRET:  bbec693632ddd25adeefaddfa64a3e8e1245a97f530cb492f1d3f496ae3a1936
-      UPLOADS_DIR:          /app/uploads
-      FRONTEND_URL:         https://frais.domench.fr
-      GAEL_EMAIL:           waltergael@1dotech.com
-      GAEL_PASSWORD:        Changeme123!
-      GREG_EMAIL:           waltergreg@1dotech.com
-      GREG_PASSWORD:        Changeme123!
+      NODE_ENV:     production
+      PORT:         3001
+      DATABASE_URL: postgresql://notesfrais:${DB_PASSWORD}@db:5432/notesfrais
+      JWT_SECRET:   ${JWT_SECRET}
+      APP_SECRET:   ${APP_SECRET}
+      UPLOADS_DIR:  /app/uploads
+      FRONTEND_URL: https://frais.domench.fr
+      GAEL_EMAIL:   ${GAEL_EMAIL}
+      GAEL_PASSWORD: ${GAEL_PASSWORD}
+      GREG_EMAIL:   ${GREG_EMAIL}
+      GREG_PASSWORD: ${GREG_PASSWORD}
     volumes:
-      - uploads:/app/uploads
+      - /opt/notesfrais/uploads:/app/uploads
     depends_on:
       db:
         condition: service_healthy
@@ -79,6 +79,4 @@ networks:
   coolify:
     external: true
 
-volumes:
-  pgdata4:
-  uploads:
+# Pas de volumes nommés — bind mounts définis directement dans chaque service