password visible to everyone?

[f1-outsourcing]

You do know that supplying the password as command line argument is visible to every one? Lots of containers work with supplying configuration via environment variables

[sosedoff]

@f1-outsourcing what exactly do you mean by every one?

Also, see https://github.com/sosedoff/pgweb/wiki/Usage#environment-variables-available for environment variables supported by the application

[f1-outsourcing]

I am blind! Totally missed this page. Everyone that can query the host ps, and some container orchestrators publish this type of information in rest end points.

Maybe put this also in the --help, that is the first thing people consult

[sosedoff]

Gotcha - keep in mind pgweb is not meant to be run in untrusted environments, its a tool that does not have many control knobs so if you're concerned with security (ie people seeing prod credentials) - do not run pgweb on such hosts.

I'll make a note of --help modifications, thank you.

[sosedoff]

This was added in #586