fulltextsearch icon indicating copy to clipboard operation
fulltextsearch copied to clipboard

elasticsearch connecting string gets saved in db in cleartext

Open mamema opened this issue 1 year ago • 1 comments

the connection string http://user:password@ip

gets saved as is aka cleartext into the psql database. it would be great if nextcloud and/or plugins would support something like

ELASTIC_PASSWORD_FILE=/run/secrets/the_elastic_password.txt

to make use of docker secrets and then declare the connection string something like

http://user:$(ELASTIC_PASSWORD)@ip

mamema avatar Feb 24 '24 12:02 mamema

Might be helped by nextcloud/server#43114

joshtrichards avatar Mar 07 '24 22:03 joshtrichards