Persists secret_key between updates

.dockerignore

@@ -1 +1,2 @@
 **/.git
+.secret_key

.gitignore

@@ -103,3 +103,4 @@ package-lock.json
 # Debian builds
 dpkg/build
 dpkg/deb
+.secret_key

docker-compose.yml

@@ -33,6 +33,7 @@ services:
       - WO_BROKER
       - WO_DEV
       - WO_DEV_WATCH_PLUGINS
+      - WO_SECRET_KEY
     restart: unless-stopped
     oom_score_adj: 0
   broker:
@@ -52,5 +53,6 @@ services:
     environment:
       - WO_BROKER
       - WO_DEBUG
+      - WO_SECRET_KEY
     restart: unless-stopped
     oom_score_adj: 250

webodm.sh

@@ -335,7 +335,21 @@ run(){
 	eval "$1"
 }
 
+get_secret(){
+	if [ ! -e ./.secret_key ] && [ -e /dev/random ]; then
+		echo "Generating secret in ./.secret_key"
+		export WO_SECRET_KEY=$(head -c50 < /dev/random | base64)
+		echo $WO_SECRET_KEY > ./.secret_key
+	elif [ -e ./.secret_key ]; then
+		export WO_SECRET_KEY=$(cat ./.secret_key)
+	else
+		export WO_SECRET_KEY=""
+	fi
+}
+
 start(){
+	get_secret
+
 	if [[ $dev_mode = true ]]; then
 		echo "Starting WebODM in development mode..."
 		down

webodm/settings.py

@@ -27,6 +27,9 @@ BASE_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 try:
     from .secret_key import SECRET_KEY
 except ImportError:
+    if os.environ.get("WO_SECRET_KEY", "") != "":
+        SECRET_KEY = os.environ.get("WO_SECRET_KEY")
+    else:
         # This will be executed the first time Django runs
         # It generates a secret_key.py file that contains the SECRET_KEY
         from django.utils.crypto import get_random_string