Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bepasty: add secretKeyFile option #24755

Merged
merged 1 commit into from Apr 21, 2017

Conversation

basvandijk
Copy link
Member

This gives users the option to store the secret key outside the world-readable Nix store.

This is part of: #24288.

This gives users the option to store secrets outside the
world-readable Nix store.
@mention-bot
Copy link

@basvandijk, thanks for your PR! By analyzing the history of the files in this pull request, we identified @makefu and @ehmry to be potential reviewers.

@makefu
Copy link
Contributor

makefu commented Apr 10, 2017

@basvandijk thanks for looking after it. If i understand the code correctly then this breaks backwards compatibility, right? secretKey will no longer be used. Because the secretKey argument in Bepasty is only the seed for generating safe session cookies ( http://bepasty-server.readthedocs.io/en/latest/quickstart.html#bepasty.config.Config.SECRET_KEY ) i'd rather have a fallback mechanism, e.g. if secretKeyFile is unset use secretKey.

Edit: nevermind, saw the fallback is implemented down below 👍 code looks good.

@bennofs bennofs merged commit 8551550 into NixOS:master Apr 21, 2017
@bennofs
Copy link
Contributor

bennofs commented Apr 21, 2017

Thanks, looks good.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants