Allow pangolin-cli to read machine credential settings from config file #2536
Closed
rskallies
started this conversation in
Feature Requests
Replies: 1 comment
-
|
I'm now using Olm CLI instead of the Pangolin CLI. Olm generates a config file on first launch, after that it reads from the file. So this must be 'advanced usage' according to the docs [https://docs.pangolin.net/manage/clients/configure-client#olm-advanced] So I think this feature request is already fulfilled. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Summary
Currently when run the client on a headless machine the --id --secret and --endpoint option must be used. This is also true when using a systemd unit. Please add a way to read these from an environment file. Currently any user on a system can see the credentials in the process list.
Motivation
Security best practices.
Proposed Solution
Add read from env e.g. /etc/default/pangolin-cli or systemd.service with Environment=SECRET=xxx or EnvironmentFile=/etc/default/pangolin-cli
Alternatives Considered
No response
Additional Context
No response
Beta Was this translation helpful? Give feedback.
All reactions