Skip to content

bepasty: add secretKeyFile option#24755

Merged
bennofs merged 1 commit intoNixOS:masterfrom
LumiGuide:bepasty-secretKeyFile
Apr 21, 2017
Merged

bepasty: add secretKeyFile option#24755
bennofs merged 1 commit intoNixOS:masterfrom
LumiGuide:bepasty-secretKeyFile

Conversation

@basvandijk
Copy link
Copy Markdown
Member

This gives users the option to store the secret key outside the world-readable Nix store.

This is part of: #24288.

This gives users the option to store secrets outside the
world-readable Nix store.
@mention-bot
Copy link
Copy Markdown

@basvandijk, thanks for your PR! By analyzing the history of the files in this pull request, we identified @makefu and @ehmry to be potential reviewers.

@makefu
Copy link
Copy Markdown
Contributor

makefu commented Apr 10, 2017

@basvandijk thanks for looking after it. If i understand the code correctly then this breaks backwards compatibility, right? secretKey will no longer be used. Because the secretKey argument in Bepasty is only the seed for generating safe session cookies ( http://bepasty-server.readthedocs.io/en/latest/quickstart.html#bepasty.config.Config.SECRET_KEY ) i'd rather have a fallback mechanism, e.g. if secretKeyFile is unset use secretKey.

Edit: nevermind, saw the fallback is implemented down below 👍 code looks good.

@bennofs bennofs merged commit 8551550 into NixOS:master Apr 21, 2017
@bennofs
Copy link
Copy Markdown
Contributor

bennofs commented Apr 21, 2017

Thanks, looks good.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants