new approach for secrets

Dockerfile

@@ -2,10 +2,6 @@ FROM rocker/shiny-verse:latest
 
 WORKDIR /code
 
-# Expose the secret OPENAI_API_KEY at buildtime and use its value as an environment variable
-RUN --mount=type=secret,id=OPENAI_API_KEY,mode=0444,required=true \
-    echo "OPENAI_API_KEY=$(cat /run/secrets/OPENAI_API_KEY)" >> .Renviron
-
 # Install stable packages from CRAN
 RUN install2.r --error \
     shiny \
@@ -17,4 +13,10 @@ RUN install2.r --error \
 
 COPY . .
 
-CMD ["R", "--quiet", "-e", "shiny::runApp(host='0.0.0.0', port=7860)"]
+# Create a script that reads the secret and exports it as an environment variable
+RUN echo '#!/bin/sh' >> start.sh && \
+    echo 'export OPENAI_API_KEY=$(cat /run/secrets/openai_api_key)' >> start.sh && \
+    echo 'R --quiet -e "shiny::runApp(host='\''0.0.0.0'\'', port=7860)"' >> start.sh && \
+    chmod +x start.sh
+
+CMD ["./start.sh"]