Building a Discourse image without baking in the database password?

As @brahn said set that ENV var to empty in the latest hook. The run hook should work.

You can also build another image using the bootstrapped one as a base and empty that variable in a docker file.