I am suspecting that POSTGRES_PASSWORD is required when creating the cluster the first time.
But then it stays there for everyone to see via docker inspect mycontainername

Even if I change the postgres user password, the original POSTGRES_PASSWORD is still there...(and now it shows wrong password)

If the environment variables are only needed for 1st time container setup, is there a way to remove them afterwards? If so should that be part of the script?

If that is not possible, is there a way to at least specify hash of the password ?