hydroxide-docker icon indicating copy to clipboard operation
hydroxide-docker copied to clipboard
verified publisher icon harleylang

Remove plain password input into environmental vars

Open harleylang opened this issue 5 years ago • 2 comments

See: https://github.com/emersion/hydroxide/issues/109#issuecomment-658490964

harleylang avatar Jul 15 '20 01:07 harleylang

I note that comment linked is around the TLS wrapper security - I can add that by adding a Traefik service into the Docker-Compose. However the title for this issue is talking about plain password input - I can see a few issues around security - shall I just add them myself seperately?

arichtman avatar Dec 24 '20 03:12 arichtman

@arichtman yes any PRs that seeks to tighten the security of the Dockerfile / docker-compose (including best practices for inputting / storing passwords) are welcome!!!

harleylang avatar Dec 24 '20 23:12 harleylang