fickit: Handle secrets more seriously

libfic/db.go

@@ -4,6 +4,7 @@ import (
 	"database/sql"
 	"errors"
 	"fmt"
+	"io/ioutil"
 	"log"
 	"os"
 	"strings"
@@ -36,6 +37,16 @@ func DSNGenerator() string {
 	}
 	if v, exists := os.LookupEnv("MYSQL_PASSWORD"); exists {
 		db_password = v
+	} else if v, exists := os.LookupEnv("MYSQL_PASSWORD_FILE"); exists {
+		fd, err := os.Open(v)
+		if err != nil {
+			log.Fatal("Unable to open MYSQL_PASSWORD_FILE:", err)
+		}
+
+		b, _ := ioutil.ReadAll(fd)
+		db_password = strings.TrimSpace(string(b))
+
+		fd.Close()
 	} else if v, exists := os.LookupEnv("MYSQL_ROOT_PASSWORD"); exists {
 		db_user = "root"
 		db_password = v