Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stop using static passwords in docker-compose file #54

Open
eckad158 opened this issue Jun 29, 2020 · 0 comments
Open

Stop using static passwords in docker-compose file #54

eckad158 opened this issue Jun 29, 2020 · 0 comments

Comments

@eckad158
Copy link

eckad158 commented Jun 29, 2020

Is this a bug or feature request?

feature request

What is the current behavior?

the docker-compose file contains static passwords

Which are the steps to reproduce?

look at docker-compose file line 14 + 17
- METASFRESH_PASSWORD=metasfresh
- POSTGRES_PASSWORD=ip2LmNzXX8p8iXg9lZTWEJ9524kQDbXFudB7LR03T-xK9fLweX3TLMkA2AYcEiaS

What is the expected or desired behavior?

There are poeple who use the default docker-compose version and do not change the password at all.
Thats why it would make sense to improve the security by generating complex passwords for the default metasfresh user and the postgres database.

The Jitsi Project uses a small script, that replaces the static passwords. Have a look at the gen-passwords.sh: LINK TO FILE

This should maybe be extended by a simple echo for printing the generated passwords once it is run.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant