Add information that repo passwords should not be used.

README.md

@@ -96,6 +96,9 @@ docker-compose build
 
 ### Start Local
 
+**Attention: This Repository contains simple passwords as placeholder. Please be aware that these passwords should not
+be used for production deployments of the gateway!**
+
 In order to start the gateway on your local computer you have to follow these steps:
 
 * Create TrustAnchor

docker-compose.yml

@@ -7,9 +7,9 @@ services:
       - 3306:3306
     environment:
       - MYSQL_DATABASE=dgc
-      - MYSQL_ROOT_PASSWORD=admin
+      - MYSQL_ROOT_PASSWORD=admin # do not use this for production deployments
       - MYSQL_USER=dgc_adm
-      - MYSQL_PASSWORD=admin
+      - MYSQL_PASSWORD=admin # do not use this for production deployments
     networks:
       persistence:
 
@@ -25,12 +25,12 @@ services:
       - SPRING_PROFILES_ACTIVE=mysql,docker
       - SPRING_DATASOURCE_URL=jdbc:mysql://mysql:3306/dgc
       - SPRING_DATASOURCE_USERNAME=dgc_adm
-      - SPRING_DATASOURCE_PASSWORD=admin
+      - SPRING_DATASOURCE_PASSWORD=admin # do not use this for production deployments
       - DGC_TRUSTANCHOR_KEYSTOREPATH=/ec/prod/app/san/dgc/ta.jks
-      - DGC_TRUSTANCHOR_KEYSTOREPASS=dgcg-p4ssw0rd
+      - DGC_TRUSTANCHOR_KEYSTOREPASS=dgcg-p4ssw0rd # do not use this for production deployments
       - DGC_TRUSTANCHOR_CERTIFICATEALIAS=dgcg_trust_anchor
       - DGC_PUBLICATION_KEYSTORE_KEYSTOREPATH=/ec/prod/app/san/dgc/publication-signer-tst.jks
-      - DGC_PUBLICATION_KEYSTORE_KEYSTOREPASS=dgc-p4ssw0rd
+      - DGC_PUBLICATION_KEYSTORE_KEYSTOREPASS=dgc-p4ssw0rd # do not use this for production deployments
       - DGC_PUBLICATION_KEYSTORE_CERTIFICATEALIAS=dgc_tst_publication
     depends_on:
       - mysql

src/main/resources/application-mysql.yml

@@ -2,7 +2,7 @@ spring:
   datasource:
     url: jdbc:mysql://localhost:3306/dgc
     username: sa
-    password: sa
+    password: sa  # do not use this for production deployments
     driver-class-name: com.mysql.cj.jdbc.Driver
     jndi-name: false
   jpa:

src/main/resources/application.yml

@@ -45,7 +45,7 @@ dgc:
     downloadEnabled: false
     keystore:
       keyStorePath: /ec/prod/app/san/dgcg/dgc-publication.jks
-      keyStorePass: dgc-p4ssw0rd
+      keyStorePass: dgc-p4ssw0rd # do not use this for production deployments
       certificateAlias: dgc_publication
     url: https://example.org/asset-manager
     amngr-uid: 00000000-0000-0000-0000-000000000000