chamberlain icon indicating copy to clipboard operation
chamberlain copied to clipboard

[SECURITY] configure via env vars

Open jblachly opened this issue 1 year ago • 0 comments

Presently, chamberlaind is configured via command line params. Unfortunately, this means that any user irrespective of privilege level can see the entire command line, including RPC passwords for bitcoind and chamberlaind.

One way to mitigate this is to configure the application alternatively via environment variables. This has the additional benefit of fitting more nicely into typical configuration procedures for container orchestration systems such as k8s, nomad, and AWS ECS.

jblachly avatar Aug 24 '24 21:08 jblachly