Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add environment variable to set velocity secret. #6333

Closed
wants to merge 2 commits into from

Conversation

NoahvdAa
Copy link
Member

@NoahvdAa NoahvdAa commented Aug 5, 2021

This PR adds support for the VELOCITY_SECRET environment variable, which can be used as an alternative to the config parameter. (#6332)

@NoahvdAa NoahvdAa requested review from a team as code owners August 5, 2021 14:11
@NoahvdAa NoahvdAa requested a review from Proximyst August 5, 2021 15:13
@MiniDigger
Copy link
Member

am kinda meh about this, see #6332 (comment)

Copy link
Contributor

@qixils qixils left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

am kinda meh about this

i think a simple, one-variable solution is fine for a config option like this (it literally has secret in the name! wouldn't be good to leak it from uploading your paper.yml to get tech support or something). yes, there is a better way to implement it, but that's a larger and probably low-priority project and it doesn't make sense to delay a potentially important security feature like this (especially one marked as "good first issue" :P)

@NoahvdAa
Copy link
Member Author

NoahvdAa commented Oct 3, 2021

Closing in favor of #6710.

@NoahvdAa NoahvdAa closed this Oct 3, 2021
@NoahvdAa NoahvdAa deleted the velocity-secret-environment branch October 28, 2021 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants