Hide credentials from log

diff --git a/docker/wait-for-redis.py b/docker/wait-for-redis.py
index 8ceae1ba9aaa617007a7bcdf2bdb4c24fe4309f8..5765461509d0db8b1cb5f7d9a5de510f9378d88b 100755 (executable)
--- a/docker/wait-for-redis.py
+++ b/docker/wait-for-redis.py
@@ -7,6 +7,7 @@ a certain number of times, waiting a little bit in between
 import os
 import sys
 import time
+import re
 from typing import Final
 
 from redis import Redis
@@ -17,8 +18,14 @@ if __name__ == "__main__":
     RETRY_SLEEP_SECONDS: Final[int] = 5
 
     REDIS_URL: Final[str] = os.getenv("PAPERLESS_REDIS", "redis://localhost:6379")
+    matches = re.match(r"(?P<protocol>.*//)(?P<credentials>.*\@)?(?P<host>.*)", REDIS_URL)
 
-    print(f"Waiting for Redis: {REDIS_URL}", flush=True)
+    credentials=""
+    if (matches.group("credentials") is not None):
+        credentials="xxx:xxx@"
+    redisurl="{0}{1}{2}".format(matches.group("protocol"), credentials, matches.group("host"))
+
+    print(f"Waiting for Redis: {redisurl}", flush=True)
 
     attempt = 0
     with Redis.from_url(url=REDIS_URL) as client:
@@ -37,8 +44,8 @@ if __name__ == "__main__":
                 attempt += 1
 
     if attempt >= MAX_RETRY_COUNT:
-        print(f"Failed to connect to: {REDIS_URL}")
+        print(f"Failed to connect to: {redisurl}")
         sys.exit(os.EX_UNAVAILABLE)
     else:
-        print(f"Connected to Redis broker: {REDIS_URL}")
+        print(f"Connected to Redis broker: {redisurl}")
         sys.exit(os.EX_OK)