Merge pull request #43 from puckel/fernet-key-as-env

Fix issue #39

README.md

@@ -54,8 +54,13 @@ Go to Admin -> Connections and Edit "mysql_default" set this values (equivalent
 - Login : airflow
 - Password : airflow
 
+For encrypted connection passwords (in Local or Celery Executor), you must have the same fernet_key. By default docker-airflow generates the fernet_key at startup, you have to set an environment variable in the docker-compose (ie: docker-compose-LocalExecutor.yml) file to set the same key accross containers. To generate a fernet_key :
+
+        python -c "from cryptography.fernet import Fernet; FERNET_KEY = Fernet.generate_key().decode(); print FERNET_KEY"
+
 Check [Airflow Documentation](http://pythonhosted.org/airflow/)
 
+
 ## Install custom python package
 
 - Create a file "requirements.txt" with the dedired python modules

docker-compose-LocalExecutor.yml

@@ -15,6 +15,7 @@ services:
         environment:
             # - LOAD_EX=n
             - EXECUTOR=Local
+            # - FERNET_KEY=9IoTgQ_EJ0hCsamBU3Mctc7F9OkODnndOKCwkwXCAA
         # volumes:
         #     - /localpath/to/dags:/usr/local/airflow/dags
         ports:
@@ -31,5 +32,6 @@ services:
             # - /localpath/to/dags:/usr/local/airflow/dags
         environment:
             # - LOAD_EX=n
+            # - FERNET_KEY=9IoTgQ_EJ0hCsamBU3Mctc7F9OkODnndOKCwkwXCAA
             - EXECUTOR=Local
         command: scheduler -n 5

script/entrypoint.sh

@@ -7,7 +7,8 @@ POSTGRES_HOST="postgres"
 POSTGRES_PORT="5432"
 RABBITMQ_HOST="rabbitmq"
 RABBITMQ_CREDS="airflow:airflow"
-FERNET_KEY=$(python -c "from cryptography.fernet import Fernet; FERNET_KEY = Fernet.generate_key().decode(); print FERNET_KEY")
+: ${FERNET_KEY:=$(python -c "from cryptography.fernet import Fernet; FERNET_KEY = Fernet.generate_key().decode(); print FERNET_KEY")}
+# FERNET_KEY=$(python -c "from cryptography.fernet import Fernet; FERNET_KEY = Fernet.generate_key().decode(); print FERNET_KEY")
 
 # Load DAGs exemples (default: Yes)
 if [ "x$LOAD_EX" = "xn" ]; then